I hope there's already some kind of campaign forming around this

I hope there's already some kind of campaign forming around this. I guess we have at most twelve months before the problems +Matthew Garrett is highlighting here will start to become entrenched enough to impact future consumers.

Now would be a good time to start talking with anti-monpoly groups and lobbying for a mandatory ability to install new signing keys in all UEFI secure booting systems.