I said, from the point of view of the bootloader: signed with an untrusted certificate and unsigned are effectively the same thing.

Somehow this was controversial.