Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.

Updated firmware trust chains strengthen rootkit protection and zero-trust infrastructure security.

Microsoft has officially introduced boot support for the Resilient File System (ReFS) in the latest Windows Server Insider Preview builds.

In sharp contrast with its approach to privacy, Windows 11 security is in a good place, with no major enshittification issues.