What if recovery media is not provided? You're being too optimistic in relying on past practices which are being discontinued (for example, Apple OS upgrades are mostly done over the net now). More importantly, you won't address why it's even necessary to lock a person out of their own computer. Your blind faith in secure boot sounds to me like a garden-variety anti-progessive stance, without any good evidence. Those GNU zealots are so unreasonable, aren't they!