MS is between a rock and a hard place when it comes to security and legacy support but I still think they approached this the wrong way. Windows is both the most popular PC OS and a huge target because of that legacy baggage they're been carrying around for years.
On the other hand every other device on the market now (mobile phone, tablets, everything Apple) are almost completely locked down from the user's perspective so MS probably feels they are safe in joining the rest of the world in tying the user's hands.
I understand the move towards better security but they should also consider extending Windows 10 support beyond the current end of 2025 deadline, given the harsh requirements for upgrade. You could buy a brand new MS device today and see it turn into an unsupported paperweight in just 4 years. The security pros for Secure Boot shouldn't come at the cost of millions of useless and unsupported PCs so early in their (historically long) lifecycle.