Well theoretically if you had a secure, verified boot chain this would plug a hole in it.

However in practice we don't have a full signed and verified stack.