Does this allow users to install custom OSs on devices with verified boot chains like game consoles and phones?
Because this would only leak private keys inside the device, you can only attack Trusted Boot (where producing trusted signatures is important), not Secure Boot (which only verifies signatures that were produced elsewhere).
Storage would be encrypted with a symmetric AES key, this only leaks asymmetric ECDSA signing keys