[selfhoster11]

I disagree. UEFI boot security is not that recent, and it hasn't changed so much as to render earliest approaches less secure.

[Foxboron]

It is less secure. The initramfs is not signed, along with the microcode.