[my123]

That was a restriction for 32-bit Arm Windows devices, which were indeed locked down. (I ended up breaking the Secure Boot implementation for Windows RT devices later on, and they didn't bother to fix it)

For 64-bit Arm Windows devices, they had the security policies of a conventional PC since the very beginning.

[flyinghamster]

Thanks for clearing that up for me. I've long viewed that as one of the storm clouds on the horizon, as it was.