> and possibly on some ARM systems

Disabling Secure Boot is forbidden on ARM systems. Point 18 ends with:

    Disabling Secure Boot must not be possible on ARM systems.