> in theory, Google could make a signed blob that unlocked secure boot if the government really wanted it anyway Iff the design is secure with regards to stori

> in theory, Google could make a signed blob that unlocked secure boot if the government really wanted it anyway Iff the design is secure with regards to storing the secret used to unlock user data, then Google signing a blob to unlock signed boot for a new arbitrary image still wouldn't allow that new image to spill existing user data. (I have no idea if this is actually the case though)