Not that it solves the problem, but since I'm not the King of M$ this is about all I can do: you could easily get around all that by turning off secure boot and booting into a persistant live-usb containing a linux distro of your choice (Tails for extra privacy/ease, if you can use Tor) to do all your secret agent computing needs. The host PC can't see shit of what happens on Tails.
Edit: lol you downvoted me because I can't singularly change an entire corporation's mind and instead offer workable solutions that you could make within the next 30 minutes to mitigate the problem until such time as your plan for Microsoft domination comes to fruition and you can change it back?
Ok I guess, "chump don't want no help, chump don't get no help. Jive ass fools ain't got no brains, anyhow."
-Barbara Billingsly