The worry with secure boot would be manufacturers taking away the ability to manage/disable it on consumer devices. This rule doesn't seem to get any closer to

The worry with secure boot would be manufacturers taking away the ability to manage/disable it on consumer devices. This rule doesn't seem to get any closer to that scenario, it's a change in the default configuration of "secured core" systems marketed for enterprise use. Secure boot can still be managed or disabled, and the change only impacts big Linux distros that got MS to sign their bootloaders. For the general case of being able to run any OS it's been necessary to go into BIOS settings since computers started shipping with secure boot by default around the time of Windows 10 release.