Secure Boot&#x27;s aim is mostly to protect against malware persisting through the boot process (&quot;bootkits&quot;). Given that it&#x27;s anchored in the firmware and the firmware is unverified in almost all consumer x86 motherboards, an attacker with physical access can still bypass it in a trivial amount of time (it requires some preparation to figure out what to patch, but the patching itself is quick).