>>717362597
It requires Secure Boot, so rootkits aren't possible.