They all works fine because Microsoft allows distros to sign their keys. We are a single bad law or a change of corporate politics away from them not doing that and deleting Linux out of existence on personal computers.

Now, maybe you’ll still be allowed to if you have a special license from the government to purchase approved hardware to run it in a datacenter. Which can be promptly revoked if you were found to be running illegal VPN software or something like that.

You can self-sign keys. Secure Boot has had a mechanism for that already for years (mok on Linux).