Note that under no circumstances can it "compel" you to hand over the signing keys. It can compel you to _stop infringing_, though. Which you may do by either stop redistributing GRUB , or by allowing your customers to install their own signatures, or if you are really stupid, by giving out your private keys. But you cannot be forced to do the later.

As usual it's just FUD.