You can dualboot. Bootloader protects the kernel. If you boot to non-signer kernel, drm is off (as well as any features that need it).