Actually you are allowed to use grub2. The issue would be if you sell a device with grub2 pre-installed, and no way to install a user version.

Also, the other distributions could simply use Ubuntu's signed bootloader (So could rootkits).