> because of space constraints (typical CA trust root collections are around 100 KB in size). Since shim is an executable in the ESP, which is a HDD or SSD par

> because of space constraints (typical CA trust root collections are around 100 KB in size). Since shim is an executable in the ESP, which is a HDD or SSD partition, the space constraints are more relaxed (it's not a small SPI NAND chip).