@hisham_hm
> I haven't heard about this latest Google thing [Web Environment Integrity proposal] but from the name alone it gives me strong Microsoft Secure Boot vibes
You mean this?
https://github.com/RupertBenWiser/Web-Environment-Integrity/blob/main/explainer.md
The stated goals seem reasonable, but I guess as with Restrited Boot, the devil is in the details. I don't have the knowledge to fully evaluate it, but I look forward to seeing someone like RMS or @pluralistic comment on it.