>As all sysadmins know, securing a machine from its owner is often the right thing to do, and in that sense UEFI is not a bad thing.

It most certainly is. We're not talking about an IT department controlling company-owned machines. We're talking about Microsoft controlling user-owned machines.