From discussions with Michael earlier: shim task was opened to make sure bug was on release team radar, and hopes that either shim or grub may be able to participate in detection/mitigation. Issue some sort of "WARNING: don't do this, Ubuntu can't run on this firmware" if specific firmware identifier is detected, before UEFI progresses? If this is not the case, task should be marked as invalid.
From discussions with Michael earlier: shim task was opened to make sure bug was on release team radar, and hopes that either shim or grub may be able to participate in detection/ mitigation. Issue some sort of "WARNING: don't do this, Ubuntu can't run on this firmware" if specific firmware identifier is detected, before UEFI progresses? If this is not the case, task should be marked as invalid.