You can of course leave secure boot disabled in UEFI, but you can’t run secure boot with BIO, to my knowledge. That’s why the association - if you want SB, use UEFI.
Not sure I've ever seen anyone wanting secure boot. what is it actually good for aside from generating searches for Google when you have to figure out how to circumvent it?
I prefer to use Secure Boot when it makes sense. It completely shuts down lots of incredibly hard to detect forms of malware. Its nice knowing the boot environment is exactly as I intended and hasn't changed.
It makes sure that someone didn’t boot into another OS on my laptop and try to decrypt BitLocker, since BitLocker will hard lock if the secure boot keystore is fiddled with or if a USB drive is booted from.
I wouldn’t run any laptop without it and drive encryption. The combo are really tough for a bad actor to bypass. In terms of things that make me worry less about having a laptop stolen, SB&DE are tops.
