>Secure Boot might be a useful part, if everybody could add his own keys to his own board, and delete existing keys for Microsoft and others. But one has to pay to get his key signed by Microsoft.

That is exactly what Microsoft mandates for secure boot for Windows 8 certification. Please stop spreading misinformation.