A lot of people who know about this stuff (FSF, EFF, people who work on this stuff for a day job, others) are saying that it wont be possible to comply with the new rules unless you lock the devices down to only run manufacturer provided stuff.