This is a great security feature in Android. It sounds an awful lot like Silverblue’s rpm-ostree, and in combination of Secure Boot.
At this point, what would be the difference between Verified Boot and Secure Boot + rpm-ostree? Is Verified Boot something that Silverblue is trying to achieve?
Mac OSX has something similar: About Startup Security Utility - Apple Support
and so does Windows with Win10 S mode: Introducing Windows 10 in S mode – Performance that lasts
Is there anything that the boot chain is missing in Silverblue at this point?