Key to remember is never use anything that comes from Microsoft. Even vscode should be replaced with vscodium.

But something from M$ that is so critical is just bad. Even some Thinkpad T come signed with some M$ keys and that is really bad.

So even if you enable secure boot, use your own keys if possible.

https://wiki.archlinux.org/title/Unified_Extensible_Firmware...

And yet you see some folks happy with Microsoft "investing" into open-source projects.

Microsoft never did and never will do something without personal interest. It is so ridiculous that the simple fact of using VSCodium, blocks many extension from being installed because it must be VSCode. If I cannot find the package elsewhere and manually install it, I'm going nowhere. Microsoft is taking what matter to them while killing everything else.

Also, the major part of the problems within the open-source world is its own community. Things are way too fragmented, competition is better than sharing and so on.

I mean, look at Ubiquity, how much did they give back to the open-source projects that helped them be who they are today??

Look at Ubuntu, the distro that dragged users away from Windows is now our enemy. SNAP is fully managed by them only, thankfully Mint kept FLATPAK instead, not to mention privacy issues Ubuntu has been involved into.

Raspberry Pi project using Microsoft repos without making announcements, users found it out and the usual "We are sorry, not really because we go the money"

pfSense merged crappy WireGuard code with vulnerabilities into pfSense and FreeBSD forcing the WireGuard creator to fix the mess. Netgate, a company is backing up pfSense so nothing new there.

This is just the tip of the iceberg.

If some project decides to take this secure boot mess seriously which has been a problem since forever, we will see tons of forks, more fragmentation, more competition and nobody gets anywhere.