Re:Arch Linux adapted for Windows Subsystem for Linux
by mcsofake on Thursday September 15, 2016 @02:56PM
(#12508772)
I don't think that will help. Windows can patch the bootloader to cache the encryption password. Since Microsoft controls the secure boot signing keys, they can sign the patched bootloader too, so even secure boot cannot protect you. Having the bootloader on a USB drive is probably a good idea though.
(*Or a boot loader on a separate USB drive which is never plugged in while running Windows)