Secure boot is a prerequisite for having a walled garden. It was never an answer to the question of how to prevent rootkits from persisting by hooking into the

Secure boot is a prerequisite for having a walled garden. It was never an answer to the question of how to prevent rootkits from persisting by hooking into the boot process, because that was never a widespread problem. It's an answer to the question of how we can make sure we get 10¢ every time someone sells a $1.50 download of Angry Potato Fiends. Maybe, in some cases, there's a concession where the end user can drill down into some third-tier menu and press up-down-left-right-triangle-square to set the device in "developer mode" so they can run what they like, but that's nowhere near the same as it just being free.