I think that the bootloader is not such a threat, and the risk of tampering the ROM is minimal, but I have not analyzed its actual impact. However it is good to stay aware that there is some code running before ndssigner.