With a locked & encrypted bootloader, rom development will be slow, and kernel development will be still born. If the security isn't stronger compared to how the Verizon Galaxy S3 was released(before the bootloader leak), then Custom Recovery and Kexec roms should be possible down the road assuming enough interested is there.