Garrett: Linux kernel lockdown, integrity, and confidentiality

I'm sort of split on this issue. I recognize the value of intentionally locking down a system I own, control and use myself for security. And when buying a new device, I prefer those where the manufacturer doesn't pretend they still own it after I bought it, and thus lets me control what it runs.

However, there are (and probably will be for the foreseeable future) many existing devices made by less friendly companies, that can still be made to work better or be more useful by modifying or replacing the software they run. So in these cases, any effective anti-tampering measure is a hindrance to the user, not a benefit.

Also, when choosing from a list of available devices, there are obviously other concerns as well, such as features, price, or build quality. And in some cases, there is no freedom-respecting choice at all.