I don't know much about this stuff but when you mention that you don't run modified kernels, I think there may be a misunderstanding here about what the "Secure boot" thing is doing. As I understand it, it's about firmware. The kernel is not firmware, so "Secure boot" will not care about which kernel you use.
From a FOSS perspective, the big problem is if the firmware is proprietary, which is very often the case. We should have FOSS firmware that we can control.
@eliasr From the article @redstarfish sent and also from what I remember hearing, it checks multiple things, including the kernel.