That's one aspect. They implement UEFI, but no support for user loading of certificates. So you have to disable Secure Boot, making it considerably less secure

That's one aspect. They implement UEFI, but no support for user loading of certificates. So you have to disable Secure Boot, making it considerably less secure than alternatives. There's no interface or drivers for T2, so again less secure than alternatives with TPM 2.0.