Windows 8 and 10 support code injection from UEFI during boot. Lenovo used this method to distribute crapware. You cannot do a clean install on these machines and have your Windows copy remain clean.

This feature makes $ecure Boot a bad joke.

We need open source firmware and hardware. Until then security is a fairy tale.