[dmm]

The FBI have trouble compromising iphones despite having unlimited physical access so that isn't true in general.

What I'm worried about is closing these holes while preserving the ability to run whatever software I want.

And also preserving the ability to provide consistent instruction to people on how to install other operating systems. In other words if every laptop has a different magic keyboard sequence to bypass boot security it's going to be a pain to write the Debian install instructions.