Secure Boot provides no security, regardless of whether MS' keys are compromised or not. By far the weakest link in the chain is the kernel - it is swiss cheese, riddled with security holes and more keep being added.

Secure Boot doesn't buy anything, until and *UNLESS* you have something secure to boot. And we don't.