They point of having 2 drives is being able to better isolate your secure system. If you physically unplug your secure drive then you know for sure that no fun

They point of having 2 drives is being able to better isolate your secure system. If you physically unplug your secure drive then you know for sure that no fun stuff is going on behind your back. I'm not entirely sure about secure boot when it comes to validating the boot loader of an installed system so I can't vouch for that but I do know that UEFI kits aside, unless you have a proper way to validate the secure systems boot loader it could be tampered with if the disk is accessible by a compromised system. IMO the point is not to get rid of windows but to isolate whichever insecure system you use in a way in which it can't hurt the secure system (it could even be a secondary Linux system where you use Wine if that's what you want)