Yes. However, it’s not super difficult to get a signed image to meet the requirements. To my knowledge they aren’t actively trying to prevent the installation of other operating systems.

I understand there’s quite a few missing drivers on the latest Macs. It’s possible to run Linux but I don’t think it’s especially user friendly at the moment.