Comment by josephcsible

I'm confused what the threat model is here. The signing key is available to the running system, so it doesn't protect against remote malware gaining persistence by compromising the boot process. And a physically present user can change the keys in UEFI or disable Secure Boot entirely, so it doesn't protect against evil maids either. So what does it protect against?