Apple explicitly makes it so that they keep the keys to the machine in ways you cannot deal with. Microsoft, in order to support enterprise and government clie

Apple explicitly makes it so that they keep the keys to the machine in ways you cannot deal with. Microsoft, in order to support enterprise and government clients, pushes certain policies onto hardware manufacturers. While it's not the same as pushing it for everyone, enterprises being at times stingy means you can acquire relatively cheaply hardware that is "certified" for Microsoft Windows Enterprise - where Microsoft certification requires certain owner-friendly policies (including complete removal of vendor keys from secure boot and resigning everything with your own).