> There used to be a requirement by MS mandating secure boot to be disable-able. Not always, in some situations there was a requirement by MS mandating secure

> There used to be a requirement by MS mandating secure boot to be disable-able. Not always, in some situations there was a requirement by MS mandating secure boot NOT to be disable-able: https://softwarefreedom.org/blog/2012/jan/12/microsoft-confirms-UEFI-fears-locks-down-ARM/ https://softwarefreedom.org/blog/2012/jan/12/microsoft-confi... "Disabling Secure [Boot] MUST NOT be possible on ARM systems."