Comment by floatboth

Which ones, where? On X1 laptops that shipped with Windows, you can only escape into EL2 via Secure Launch: https://github.com/TravMurav/slbounce