It's designed to make a computer secure against even physical access to the hardware. Because ChromeOS systems are often used as work or school machines, and need to be 100% completely owned by the institution and immune to the actual user.