[4cao]

These defaults seem like a reasonable, pro-consumer choice. Great to know there's at least one vendor that helps to get around the restrictions Secure Boot creates for the user.

Secure Boot has always been an anti-feature, at least from the user's point of view. It seems really strange to complain your device isn't locked down enough by default: the restrictions can always be enabled manually if that's your kink.

[charcircuit]

By that logic any security feature is an antifeature. The problem with that logic is that you can't ignore the potential harm that is being protected against.

[4cao]

Security from the user, not for the user, is an anti-feature from the user's point of view. Security features in general are not.

[charcircuit]

Okay, but secure boot's purpose is protecting against malware.