There was once a time while windows RT still existed and microsoft had a requirement that it must not be possible to disable secure boot. There is also the T2 chip on macbooks which currently does this.

The T2 boot loader lock can be disabled by an Apple-provided utility.

I don't understand it either. Probably some obscure moral stance that no one besides him cares about.

No. He's fallen for some scaremongering.