[mawalu]

The TPMs are already in our machines because Microsoft requires them and CPU vendors include them in their chips. They aren't used by default and don't hinder us from doing anything. If I'm already trusting ubuntu to ship me an OS why would I have a problem with having them sign it as well.

Secureboot is a scary technology but as long as we can disable it and provide our own keys I don't see the problem. And if we lose these abilities than I'm certain it won't be Poettering or systemd to blame