Yes, they'll have to implement Secure Boot if they want the little Windows 8 sticker. There's nothing there that says they can't provide an option to turn it off. All arguments make the assumption that Secure Boot is required to be on at all times and not just on on-by-default option.