Intel x86 Root of Trust: Loss of Trust
From a practical standpoint, how easy would it now be to e.g. create a "signed" bootloader (say, custom GRUB) that will boot on those affected chips with the default secure boot configuration? Or is this just for information exfiltration?