Thank god - you wouldn't want that enabled by default.

Some people might want secure boot with their own certs to work with Linux, but I don't see the gain in security if you are using a generic boot loader.