The really interesting bit IMHO is in the comments, where Brian quite bluntly states that Intel merely provides the tools that system manufacturers (ie. Lenovo

The really interesting bit IMHO is in the comments, where Brian quite bluntly states that Intel merely provides the tools that system manufacturers (ie. Lenovo and so on) want. So while Intel could make a principled stand here (in favor of end-users), it's ODMs/OEMs that have to work with primarily. CPUs directly bought by end-users are probably a pretty minor part of their revenue, too. [edit to add:] Of course, I'd still prefer them to get rid of Verified Boot, and have OEMs decide between Measured Boot or no verification at all.