From my read of the article, Linus simply states his preference to actually support secure boot (and verify signatures), or not support it at all. He thinks att

From my read of the article, Linus simply states his preference to actually support secure boot (and verify signatures), or not support it at all. He thinks attempts to "Secure Boot" a loader which then allows arbitrary code execution are a waste of time, and they are. If you don't want boot time signature verification, you should turn it off, not break the chain of trust. In fact, done right, perhaps hardware vendors that currently only provide binary blobs could be coerced into providing source. "Oh, you want to boot on our distribution? We don't sign blobs, but if you commit source we'll build and sign the module." If ever hardware does come out that doesn't allow you to opt out of signature verification or provide your own keys, just don't buy it.