manufacturers could add support for the new key by updating the KEK database

Oh right, the KEK database. They are literally trolling us aren’t they.

Not if you disable it, “secure boot” is a joke anyway.

If you use linux and are dependant on M$, youre doing it wrong