The use cases for this should largely not be considered individual users. Presumably, a lot, if not most, personal computing devices, and certainly enterprise-g

The use cases for this should largely not be considered individual users. Presumably, a lot, if not most, personal computing devices, and certainly enterprise-grade networking equipment, is owned by companies that either 1) issue equipment directly to users who are not necessarily trusted, or 2) put it out somewhere where it might be accessible to untrusted individuals. Probably the most obvious example is something like WiFi access points for shops and hotels, which are often just sitting in a hallway mounted to the ceiling where anybody can get to them. I guess from the perspective of laptop and desktop PC makers who primarily ship devices with Windows preinstalled, they just don't want to bother with separate product lines for business versus personal use. For what it's worth, I can't speak to what is common versus not without real data, but at least from my own perspective, every non-laptop PC I have in my house is a machine I built myself from parts, and no motherboard I have ever purchased came with secure boot enabled by default. This is separate, of course, from Microsoft's decision to make Windows 11 only run on devices with a TPM.