It only prevents users from building their own kernels if they don't know how to disable Secure Boot on their hardware. Seems to me that anyone who is knowledgeable enough to be building their own kernels won't have any trouble finding the BIOS setting that turns Secure Boot off.