This is along the lines of what I’ve been wondering as well. Secure boot is really the only line of defense here and it seems to be highly underutilized, to the

This is along the lines of what I’ve been wondering as well. Secure boot is really the only line of defense here and it seems to be highly underutilized, to the point of making this grub issue look less worthy of press releases. And even if we did have a nice UI or workflow to get more people using secure boot, securely, there will certainly be bugs in the EFI implementations to compromise the boot chain there as well.