Key to remember is never use anything that comes from Microsoft. Even vscode should be replaced with vscodium. But something from M$ that is so critical is jus

Key to remember is never use anything that comes from Microsoft. Even vscode should be replaced with vscodium. But something from M$ that is so critical is just bad. Even some Thinkpad T come signed with some M$ keys and that is really bad. So even if you enable secure boot, use your own keys if possible. https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot https://wiki.archlinux.org/title/Unified_Extensible_Firmware...