[pepa65]

Secure Boot can be leveraged to more securely boot anything you choose, but it does require some setup effort, so I get it if you choose to keep things simple (but less secure).