Because computers don't boot the way they used to in the commodity BIOS era. The boot loader has to cryptographically check that it's valid operating system it's attempting to boot.