and GRUB has some really nice features e.g. GPG suppport (can check kernel signatures), LUKS (can unlock encrypted /boot). https://libreboot.org/docs/linux/grub_hardening.html look at this for example. this setup is also nice on systems with lower amounts of flash - another argument for encrypted boot is to use linuxboot, as articulated by a fan on one of my other fedi threads. yes, i plan to have a lot more fun with the new libreboot. having EFI just makes everything much more flexible.