Thank god - you wouldn't want that enabled by default. Some people might want secure boot with their own certs to work with Linux, but I don't see the gain in

Thank god - you wouldn't want that enabled by default. Some people might want secure boot with their own certs to work with Linux, but I don't see the gain in security if you are using a generic boot loader.