It is, and it isn't something I like, I'd prefer if no keys were enrolled by default.
> I am an ex Microsoft employee, bet you wouldn't guess that from these comments.
No I wouldn't have guessed, but MS is so big that just saying your were a MS employee could mean in any one of the thousands of departments not even remotely related to Windows. But that is neither here nor there as it doesn't change anything about my statement.
> I do personally consider secure boot and TPM to have been pushed in bad faith, not for serious security concerns.
Sure, but I still prefer to have this now that I can use it, even if its introduction was in bad faith (which it was consdering IIRC there were e-mail floating around talking about if they could get away with making it only work with Windows or maybe it was some other security mechanism).
