One issue with this is normally this requires a bypass of secure boot option. So device is not set and forget secure, but you have to physically secure it (not

One issue with this is normally this requires a bypass of secure boot option. So device is not set and forget secure, but you have to physically secure it (not that you wouldn't, but now it can really matter if someone has physical access to the machine). GPLv3 has been used more recently as a block to others taking code and developing things further given some of the clauses and incompatibilities it introduced.