Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
(www.welivesecurity.com)
Yeah. Best to look out for devices that don't have this restriction. Not 100% sure if the Fairphone and Shiftphone have this, but I'm sure if you ask them, they'll tell you.