On Wed, 8 Jul 2020 at 16:48, John M. Harris Jr <johnmh(a)splentity.com> wrote:
needlessly disables a lot of kernel functionality
It disables functionality which can destroy platform security.
You cannot load kernel modules you've built
If you can build and insert your own kernel module you can do almost
anything to the hardware, including disabling various firmware
protection technologies.
tl;dr: if you care about platform security at all, enable secure boot.
Richard