On T2 Macs we have to allow booting from external media in some cases.
Other options are to use internet recovery or MDS. The new M1 Macs allow
external booting by default, just like the old Mac days. To make things
consistent across old Mac, T2 Mac ...