So wait, this means that microsoft is pretty much gonna be the only signing authority for UEFI device drivers for most of the computers?
That sounds really uncomfortable to me, I was expecting some sort of modular PKI signing system, not a single signature key system