System76 will be able to insert their own keys into the firmware prior to shipping. Nevertheless, as software can only be signed by a single key, the pragmatic approach described in the article (i.e. signing using Microsoft's key, which is virtually guaranteed to be present) will inevitably result in the likes of Ubuntu shipping using Microsoft's signature anyway.