In every UEFI thread there’s a bunch of critics saying, “See! It doesn’t work! UEFI secure boot is pointless!” I say that it takes this much effort to bypass it shows the opposite: that it does work, it does increase security. Because without it, you’d be compromised already at step zero. But like every security measure so far, it’s seemingly not perfect. Nobody is honestly surprised by that, are they?
This "security" protects the kernel and the boot chain, not any user data. You will find people care very little about the security of their didn't-even-know-it-existed-kernel when it protects purely against a scenario in which all their fricking data is already considered compromised .
It's an interesting point, but surely it is useful to know when you have been compromised (e.g. to change passwords)?What about post-infection where you want to e.g. clean up the machine without reinstalling the OS unnecessarily? Or in general preventing rootkits from persisting across reboots will at least help to prevent new data being exposed?