I do mean Secure Boot and not Restricted Boot because in this case the user is the one that is ultimately in control of what keys the computer does or does not trust: https://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/

Machines that instead implement Restricted Boot can't run Linux-libre because the user won't be able to change the keys.