I'm not versed into that part. Does it bring significant improvements (more secure or flexible ?) over UEFI secure boot ?