> Yet as far as I can see, none of these subtleties are documented for those more advanced users. This is the real problem. You can concoct whatever inscrutab

> Yet as far as I can see, none of these subtleties are documented for those more advanced users. This is the real problem. You can concoct whatever inscrutable secure boot + firmware attestation scheme you want, but if you refuse to provide technical documentation for how it works, then this outcome is guaranteed. It doesn't have to be beautiful long-form prose, just a block diagram and a README level description of how it's supposed to work. Apple is really bad at this. You might be tempted to argue that Apple doesn't care about alternative operating systems and shouldn't waste resources documenting this, but this argument is flawed. As the author states, Apple's M architecture will end up in their high end systems, and those users are going to have crazier setups than a typical consumer laptop. It costs Apple next to nothing to let the Linux nerds figure this stuff out now and find bugs faster than Apple can, but the result for Apple is that the products they release next year and the year after will be more reliable. Basically for free. Shouldn't they want that?