Implementing UEFI Secure Boot in Fedora

Nobody's forbidding anyone from running anything. It's a matter of default policy. The default policy being imposed here is that only signed code should be able to directly influence hardware behaviour. Signing a bootloader that then executes unsigned code is a pretty obvious circumvention of that policy.