>1. I bought a laptop with Windows 10 with secure boot that cannot be disabled. I am stuck with it. FOREVER.
I really doubt this is the case. Microsoft actually mandated that all OEMs provide a method to disable Secure Boot and allow for loading in arbitrary, user-defined keys as part of the Windows certification process.
I just checked, You're right. I'm sorry, I didn't look at it. Basically to disable SecureBoot you must disable UEFI. SecureBoot can't be changed but boot mode can and it's either UEFI or Legacy. UEFI is 32bit so it's somewhat of an issue, but not that big of a deal, Ubuntu handles it.
I really doubt this is the case. Microsoft actually mandated that all OEMs provide a method to disable Secure Boot and allow for loading in arbitrary, user-defined keys as part of the Windows certification process.
As for the rest of it though it sounds spot on.