"Under EFI, there is no guarantee that the OS owns the platform." (archive.fosdem.org)