Macs allow the machine owner to install (and boot) a completely unsigned OS on a different partition without having it affect security when you do boot MacOS.
The Mac partitions are encrypted by default and the system partition is signed and read only.
The Mac partitions are encrypted by default and the system partition is signed and read only.