I was talking about secure boot. If the computer only runs Windows, enterprise doesn’t care. If the computer only runs Windows S, it’s an absolute nonstarter in enterprise tons of apps aren’t on the app store. But Windows S is never targeted to enterprise, only low end home users.

Anything can support secure boot, the question is, are the keys included in the BIOS so it can run that particular OS without loading extra keys?

I’ve also not personally encountered a computer where secure boot couldn’t be disabled or the list of keys modified, but I’ve definitely heard about them existing.