Comment by arcfour

I have updated my HP laptop's UEFI 4-5 times now using LVFS with HP's officially published updates. Just did it 2-3 days ago, in fact, for the latest update. I got a GUI prompt that there was a firmware update for my system, I clicked install, it said it would reboot my system, and I said ok and went to go make tea. Came back to a login screen and the update installed successfully.

I have used Secure Boot with Linux for several years now, too. Microsoft signed the shim loader and most distros can do it out-of-the-box now, much like fwupdmgr (above).

I think the biggest thing is finding, for example, devices that are Ubuntu Certified. You don't have to use Ubuntu necessarily, but the whole ecosystem benefits from hardware manufacturers having a slight degree of accountability having done this.