The issue on the linux side is the need to have a valid key to sign your bootloader and from what I understand the kernel too as it's part of the bootloader or

The issue on the linux side is the need to have a valid key to sign your bootloader and from what I understand the kernel too as it's part of the bootloader or something like that. Which means, no self compiled kernel and only from Linux vendors that were able to get a key in there. Obviously if anyone has a key it's no longer secure.