1) If the user can, but is scared away by a disingenuous message saying "Do you want to make your computer less secure by installing a non-Microsoft key (y/n)?", that would still be bad.
2) They can't on ARM-based machines that have a Windows certification.
First, Microsoft originally promised otherwise. "Pray I don't alter it any further."
Second, I and others have complained about Apple's lockdown for years. There's more leverage right now in pressuring others not to follow their example.
I don't own or plan to own an iPad. So the locking of the iPad is not affecting me directly. It is sad and silly imho that people is buying locked machines, but that's their right to do.
Now ARM boot restrictions from Microsoft directly affects me, as soon i can't buy any ARM based machine, given the way the markets work. And in the future it is a big possibility that i can't buy any other PC and put any OS that i like without pay directly or indirectly money to Microsoft. And i can see some foreign governments to use this technology to control the OS that her citizens runs, and install backdoors.
So yes UEFI secure boot is a treat to my freedom and not only my freedom to run the OS of my choice.
1) If the user can, but is scared away by a disingenuous message saying "Do you want to make your computer less secure by installing a non-Microsoft key (y/n)?", that would still be bad.
2) They can't on ARM-based machines that have a Windows certification.