Doesn't matter. Secure boot just requires that the bootloader is signed with an approved key. Most major distros already have this down as Microsoft will happily sign any bootloader that isn't a glaring hole for a small sum of money.