Customers are asking us about the recent GRUB2 vulnerability so I wrote a quick post explaining how it works and why @purism hardware isn't affected. For even more details, check out Dan Goodin's excellent Ars Technica article I link in my post.

https://puri.sm/posts/why-the-grub2-secure-boot-flaw-doesnt-affect-purism-computers/