Once upon a time, Richard Hughes <hughsient(a)gmail.com> said:
tl;dr: if you care about platform security at all, enable secure
boot.
If you want to use interesting and useful kernel technologies (namely
eBPF), disable secure boot. That's a real killer of secure boot IMHO.
--
Chris Adams <linux(a)cmadams.net>