That is closely tied to "who gets to audit the source". E.g. the FOSS community wasn't a fan of only-trusted-secure-boot when it was microsoft holding the keys

That is closely tied to "who gets to audit the source". E.g. the FOSS community wasn't a fan of only-trusted-secure-boot when it was microsoft holding the keys and the source and releasing neither.