I'm failing to see why disabling Secure Boot on a lower-end laptop before installing Linux isn't a viable option here?

Of course, being able to have it ship disabled by default is ideal, but for the HN crowd and for Linux shops, disabling Secure Boot in BIOS/EFI is trivial.