MSI's (in)Secure Boot
To me this makes a lot of sense, and really is the reason why most things are by default insecure.<p>Most people who are building their own computer are not going to be an expert in UEFI and secure boot (some may have never even heard of these things). 
These people are almost guaranteed to need to install their own OS.
So if they try, and it "doesn't work", they are going to need tech support or most likely return the motherboard as defective.
Thus it makes more sense to make the default permissive.<p>On the other hand, someone who does want to run secure boot securely is probably an expert, so they can probably figure out how to actually turn it on and harden their setup. As long as you can lock stuff down, having these people jump through a few more hoops seems like a reasonable trade-off.<p>(Also FWIW, most pre-builts or integrated devices do have real secure boot enabled, since the expectation is that users of these will likely never need to install an OS that won't work with a strict secure boot enforcement policy.)