1. It's actually trying to solve a real issue (viruses installing themselves in the boot loader so that they load before the operating system). 2. EFI Secure B

1. It's actually trying to solve a real issue (viruses installing themselves in the boot loader so that they load before the operating system). 2. EFI Secure Boot was designed to allow for multiple keys, not just the 'one true Microsoft key.' 3. It's the OEMs that are creating crappy implementations, and not documenting how to disable Secure Boot. These are not things (at least officially) mandated by Microsoft. [Though one could make an argument that Microsoft should mandate that these things be documented instead of just stating that 'the ability to do X should exist.']