I thought the binary blob thing was explained?

Basically UEFI booting requires shims and those need to be signed so the Ventoy author is re-using the ones from Fedora and OpenSUSE. This can be verified by comparing hashes, which the author of that comment shows how to do.

This whole thing seems to come down to people freaking the F out because they don't understand how the software works and the Author of the software is currently PO'd off at the community and stopped answering questions.