Daniel P. Berrangé wrote:
That is not correct. There are a number of benefits of UKIs.
The most critical is that the initrd content and cmdline is
covered by the SecureBoot signature.
From an end user point of view, having more stuff covered by Restricted Boot
is not a benefit.
Kevin Kofler