Secure Boot is cool when you control the keys. That's quite a lot of work though. Given how easy it is to bypass for consumer systems, yes the defaults suck. Ho

Secure Boot is cool when you control the keys. That's quite a lot of work though. Given how easy it is to bypass for consumer systems, yes the defaults suck. However, it makes a lot more sense in enterprise, where someone might actually be employed to manage the chain of trust.