Re: Suggestion: Use a unified kernel image by default in the future.

[Sharpened Blade]

A key on an encrypted disk can still prevent evil maid attacks, though an attacker with local access can still compromise the system. In the current system, an attacker with permissions required to read kernel memory can just ask the shim to boot their modified kernel.