Yes, that is one solution.<p>I’m just arguing that Secure Boot or similar solutions don’t mean that <i>you</i> can make sure to always know what’s on the system, but that the person with the keys can. In this case, that’s an employee at Google.