Yeah, it has something like that. All nice and solidly secure from the factory. Geeks like us then "unlock" the bootloader, allowing us to replace the alternate boot image (aka. "recovery image") with customized ones.

Cheers