Comment by Spivak
So to I guess spite Microsoft or something you're going to make your data less secure?
Turning off SecureBoot only means any rando can decide what software runs on your device and install a bootkit. Not authenticating the rest of the boot process as outlined here (what Microsoft calls Trusted Boot) only means that randos can tamper with your OS using the bits that can't be encrypted.
Literally an own-goal in every sense of the word.
> Turning off SecureBoot only means any rando can decide what software runs on your device
I see it as exactly the opposite: turning SecureBoot on means someone else can and will decide what software runs on my device.
> spite Microsoft or something you're going to make your data less secure
We all know very well Microsoft's track record with security and with data protection measures and practice. Trusting Microsoft is... irrational, let's put it that way.