“With secure-boot+attestation, the vendors can choose not to let you download the latest map data, report you to the authorities”

As far as I'm concerned, you just conceded the argument.