Problems seen with SB

• Limited variable storage space
• DBX design doesn’t scale
• SBAT mostly fixes this
• Buggy firmware implementations
• Dual-signed shim problems
• CA expiry tracking
• Inclusion of extra keys
• Vendors leaking keys