Comment 25 for bug 1788727

The overall plan is that we ARE updating the bootloader, across all supported Ubuntu releases, to no longer boot unsigned kernels. In various places the upgrade handling to report problems with unsigned kernels has landed before the actual change to the bootloader. This is correct, we certainly wouldn't want things landing in the opposite order and render the user's system unbootable!

So the security benefits are coming, but slowly and in a way that minimizes the impact to the user's system. This specific bug report is simply about a case where we misreport that the kernel will not be bootable, and will be fixed in the next upload.