In fact, many distributions don't support Secure Boot at all.
This is only true on x86. On arm, Microsoft's requirements state that it should not be possible for users to disable Secure Boot.
[1]: https://en.wikipedia.org/wiki/Windows_RT#Devices