Garrett: Don't like Secure Boot? Don't buy a Chromebook

Hmm. The article reads a lot like security of apps on Android. Either I can verify the Google Play Store apps, or turn it off and be able to use F-Droid and the Humble Bundle apps, but have (AFAIK), no verification of any apps that are installed. Has this changed and I missed a memo? Does CyanogenMod support this?