For 99% of users it's not a mess. For the average user, it just means that certain attacks will no longer succeed, as the Windows boot loader/Kernel will be ve

For 99% of users it's not a mess. For the average user, it just means that certain attacks will no longer succeed, as the Windows boot loader/Kernel will be verified before loading, and cannot be cracked. For the techie user wanting a different OS, they will either turn off secure-boot or replace the keys, a one-time operation.