Comment by fiberoptick

Does this defend against any additional attack surface that wasn't already defended by the UEFI Secure Boot standard?