Comment by federico3

> Many Secure Boot implementations let you load your own keys.

And there is no promise that this will not change.