Comment by mendocino

> NO signing keys preventing firmware modification

Not really a "secure" workstation if you can't have a secure bootchain. An open, secure platform would allow you to fuse your own root key.