> Wouldn't it be better to just include a mandatory key manager into the BIOS?

This again is a support nightmare - if a system ships with already installed keys, that means we need to instruct people on how to find this in their firmware (which is likely to vary among vendors), which keys to remove, how to add a key, etc.