@valpackett @sleepyowl It's hard to find a motherboard where you can both add your own keys and remove microsoft's without breaking hardware. For example, you can theoretically do both things in a Lenovo laptop but you had better verify your gpu hardware's software will boot without that microsoft key or you just bricked your laptop.
There's really no point if you can't add your own and remove the widely used one. May as well turn it off or use the shim method.