[apatheticonion]

They decided to leave the bootloader unlocked. I guess, in today's anti-consumer tech landscape, that's nice of them.

[philistine]

It's more complicated than that. The bootloader can maintain the chain of trust for macOS while allowing unsecured OSes next to it.