[hericium]

For now. And BIOS can be updated.

[bilegeek]

But does the option in question enable third party certificates, or disable UEFI entirely?

[int_19h]

There's a separate option for each.