What Epic wants to do is make it so their game only runs if the kernel and its modules are all signed by an approved partner, hence the “working with maintainers” bit. You wouldn’t be able to run any game with EAC if you customized your setup (which includes running third-party drivers for your GPU, sound, and/or network cards, something that’s sometimes necessary on Linux due to poor manufacturer support).

Their “solution” to this is to suggest you make two boot entries - one for your actual system, and a second, locked-down one that passes attestation to play their games. That’s a huge ask for a game whose playerbase is mainly children.