[plaguepilled]

It is certainly not as robust as MacOS or Windows protections, but I have been told it does provide a block to certain malware targeting the boot (though it is imperfect as you have pointed out).

In my case, I am not expecting total security. I just want access to be extremely inconvenient for opportunistic attackers.