That sounds like excuses. They could even make it pre-installed but require to enter a code on first boot to unlock the encrypted HDD if they really wanted a single hardware SKU but I doubt that it would be a real problem in the first place.