I'm not sure how moving boot settings from one OS-accessible place to another improves security. If you are bothered by people booting unauthorized disks on yo

I'm not sure how moving boot settings from one OS-accessible place to another improves security. If you are bothered by people booting unauthorized disks on your hardware, enforce signature checking on OS images.