That is not important. The real bad part is that you still cannot easily load modules of your own to work around broken setup by mainboard manufacturer or Intel

That is not important. The real bad part is that you still cannot easily load modules of your own to work around broken setup by mainboard manufacturer or Intel or boot rom in the device. This essentially causes lock in. Or even disable some broken modules. (Security has nothing to do with it, the module can be crypto signed by user installed key.) Plus the critical hardware setup documentation is not being released at all. Another is the use of SMI to communicate with the thing which just does not play well with a preemptible OS. Memory map handling is additional badness on top.