Note though, that plain SecureBoot cannot prevent attacks like this. This is more of an area for BootGuard. The thing is, it's also not impenetrable and has its

Note though, that plain SecureBoot cannot prevent attacks like this. This is more of an area for BootGuard. The thing is, it's also not impenetrable and has its share of the flaws, same with Intel ME and similar technologies. If anything, it helps to hide the code from the watchful eye. Current security solutions are just a gimmick. It should be properly designed AND deployed in the actual hardware for that. What we currently have offers mostly protection for vendors and DRM, not the end users. It's broken by design.