@grishka
> re-lock the bootloader, including the TrustZone stage
Hmm, it could just fail the attestation when locked with a different key, but they still don't want to do it...
> Basically the desktop Linux ideology of "we'll get there eventually"
Did you mean it's not a technical problem, but organizational, and centralization increases the speed of adoption? With that I agree.