I thought Microsoft requires UEFI + secure boot for Windows, and with no disabling option in the firmware setup, for Windows Arm PC? Or maybe it was "only" Microsoft Secure Boot and you can actually use a Linux distro? If this is the latter case, can you build and run the kernel you want or not?