Well, intel ships a tool that tells the OEM that this is a misconfiguration from a secure boot configuration POV. Linux fwupdmgr can be used to verify the secu

Well, intel ships a tool that tells the OEM that this is a misconfiguration from a secure boot configuration POV. Linux fwupdmgr can be used to verify the secure boot status and you will fail HS2 if this is not fused. Also.... would be happy to know who doesn't fuse it on newer machines. And even coreboot does not mean you can flash your own. You can have a lockdown where you can only load the OEMs coreboot.