Over the past few days, some Linux enthusiasts on the
Web have wondered: why can't a user can't simply turn it off?
This is difficult to answer since the final call is with the OEM
and not with Microsoft. The problem with this is that we don't know
how each OEM using Secure Boot is going to handle the option to
disable it. I think we'd like to believe that most OEM computer
sellers are wise enough to make this a readily available option,
but the reality is that it's all speculation at this point.