Yes they can.

If you can build and develop your own kernels, then you can generate and install a key on your hardware.

If the hardware doesn't allow it, don't buy it. (The hardware will allow it.)