> All it takes is one pre-signature exploit

I'm pretty sure GRUB is infamous now for being a source of secure boot bypasses.