Bootloader can be changed by untrusted sources

Hi,
I’m trying to ensure secure boot and firmware upgrade in Pixhawk (2 - Cube) but any other source can manually override the bootloader itself.

Any suggestions on how to proceed? Through hardware or software changes.