Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
(www.welivesecurity.com)
What problem does it create? Its a good tech and we absolutely should be cryptographically verifying the boot process to ensure it hasnt been tampered with.