And, this is exactly what secure boot was designed to do.

Perhaps it's time for it to become a reactive target. It's an HP, so perhaps it's really ALWAYS been that time...