Yep, it works great. The only caveat is that to load non-mainline drivers (e.g. VirtualBox or Nvidia) you need to enroll a Machine Owner Key (MOK) and then use

Yep, it works great. The only caveat is that to load non-mainline drivers (e.g. VirtualBox or Nvidia) you need to enroll a Machine Owner Key (MOK) and then use it to sign the driver. In Ubuntu/Debian the mokutil process is streamlined and "apt install" will automatically prompt you to do it.