Seems fair to me when your alternatives are install a signing key (for your Linux os) yourself to the EFI, disable secure boot, or allow MS to be the gatekeeper

Seems fair to me when your alternatives are install a signing key (for your Linux os) yourself to the EFI, disable secure boot, or allow MS to be the gatekeeper of what software can run on your PC, including the distro getting itself OK'd by MS with their separate OS key that might or might not be included by the OEM. Happy to be corrected if things have changed since the last time I looked at things.