Windows 10 makes disabling UEFI Secure Boot optional:
That is to say, Microsoft required an option to disable Secure Boot previously, but now that option is optional with Windows 10, meaning some hardware may not allow you to install non-Secure Boot OSes.
I'm missing my meme for when lately "tin foil hat people" are proving to be right a few times.
So they do some 2-3 step process. "Yeah, we put in this tech that can hardware lock our OS on there without you installing your own. But don't worry, it will be required to have a disable option."
"Oh look, now we made that *optional* for the OEM's." Ahem ... for nice sums of cash to the OEM or something.
And now it keeps putting cognitive burdens on even medium savvy customers who just go down to Best Buy and buy a box and have their ISO all ready ... and only later their tech expert buddy tells them it's hardware locked. And I'm aching to know what error message that throws up! Who decides the error message? MS? The OEM?
And what do stores do for return policies? Can you imagine the rage of that medium-savvy customer who bought a box for *nix, later finds out it's locked, then the mean store managers tell them "sorry, we don't refund for that. The machine is working perfectly".
I wonder if there's legal ground for one of those "fit for a purpose" type cases. I forget all the three types, but it's just ringing a bell.