Unbootable w/o changes, yes, assuming hardware vendors actually respect the expiration date.

But that's completely separate from my point. Regardless of the solution they pick for that particular problem, users can still add their own keys to Secure Boot and do whatever they want.