It certainly could if Apple wanted to do the same thing that Lenovo did.

Would MacOS actually have prevented it? Would Superfish just have simply signed the binary? Sure it wouldn't have started up when the Apple servers are down, but that's a very small percent of the time.