Or even Secure Boot. You can create and use your own certificates.
Problem with every thread related to this is everyone is going off half-cocked and not researching the matter but relying on the FUD many sites are spouting. Reminds me of the TPM flap. Now almost all mid-high end laptops and many desktops have TPMs are happily running Linux and other open source OSes with no problems.