Apple could start using the hardware TPM modules that they appear to be building into all new Macs more seriously. This would lock out all but the most determined...
In fact, Vista was slated to support EFI. However, Microsoft removed EFI support from 32-bit Windows after Apple announced its switch to Intel. IIRC, EFI support is an integral part of 64-bit Vista.