UEFI getting owned by the vendor logo parser code is extremely on brand.
Tons of time and effort put into securing platform stuff and it gets popped anyway because execs want the laptop to show the user a Lenovo logo for 3 seconds on boot even though it's already printed right there on the fucking laptop.
