@pid_eins what the hell are you talking about https://www.fsf.org/campaigns/campaigns/secure-boot-vs-restricted-boot/ this is 2011 right after secure boot came out, and also there's tons of early motherboards that made user key enrollment impossible and to this day Microsoft have an unfair control over the whole thing. why else would you need to get shims signed by them?