I have a concern that if I find malware or suspicious activity on a system, when I report it through Virus Total or another channel I won't be believed if secur

I have a concern that if I find malware or suspicious activity on a system, when I report it through Virus Total or another channel I won't be believed if secure boot is disabled and that appears in the logs. Or if another threat actor got in during the brief period it was disabled and invalidated the audit trail. "We won't accept any reports because your secure boot chain is too short." To put it bluntly and crudely. Not to dismiss a very real and important real-life issue. I've lost people I love in my life over similar things. I don't want to be in a similar situation in other Walks or Paths of life. It's a powerful incentive mechanism. Even if you're believed in the end how long did it take? How old? And now that difficult thing becomes a talking point when you just wanted to build.