On the contrary. It means only the currently installed OS will ever boot. If you wanted to switch you would enter the bios, clear the keys, then boot into the new system. That's roughly analogous to re-locking the bootloader on a pixel.

Right now to achieve that level of security you have to manually enroll only the keys you want. Have fun with that process.