Some firmware allow installing or replacing certificates and keys other than the microsoft ones, therefore it is possible to enable secure boot for clear linux on these devices (like mine).
Although this procedure require certain operations under firmware, it can be largely simplified if the installer can automatize certain parts.
This will largely improve security for desktop clear linux.