If it's anything like the previous Surface machines, the BIOS will not have the option to turn Secure Boot off. That makes it much harder to get Linux on there, too hard for most people.