You can sign your own kernel: twitter.com/never_released/status/13263…...

Well, from what I understand its less "turn off secure boot features" and more "create/add a signature for your custom code to secure boot". mobile.twitter.com/never_released/statu…... I can't find a primary source for the comment in the tweet, but it seems widely regarded as true at this point, so fingers crossed it pans out that way.

Apple ships a utility on Apple Silicon Macs that allows you to sign kernels yourself for booting yourself, sort of like EFI Secure Boot: twitter.com/never_released/status/13263…... Surely the Linux kernel does not support these things now, but there's only baseless speculation that Apple would actively lock this down.

Previously you weren't able to do that, but you were able to disable booting without signature checks. I'm mainly basing this info off this sole tweet: mobile.twitter.com/never_released/statu…...