There's a UEFI specification, not a UEFI standard. What people do with that is up to them. As far as the Microsoft thing goes - there's some constraints on what vendors have to do with Secure Boot, but nothing that covers this.