Yes. Everyone can just release a tweaked Android version and Google can't really stop them.
But if you plan to ship Google services (including the play store, which effectively makes a device an "Android device" in many users eyes) then you will have to be able to pass Googles verification suite.
That's already the case today and adding new requirements to that in new Android versions happens all the time.