Wow, this approach to UEFI would have derailed both my Masters and Ph.D. research work if it was the standard back then. To turn off x86 I/O instructions would have killed our OS-bypass low-latency parallel high speed interconnect research in the 1990's. The removal of kexec() functionality would have limited the functionality of Warewulf, the diskless beowulf cluster management tool I helped develop in the early 2000's. I could go on, but essentially, the list of things being disabled, was much of the things I've used to do HPC research work over the last 18 years!