At its WinHEC hardware conference in Shenzhen, China, Microsoft talked about the hardware requirements for Windows 10. The precise final specs are not available yet, so all this is somewhat subject to change, but right now, Microsoft says that the switch to allow Secure Boot to be turned off is now optional. Hardware can be Designed for Windows 10, and offer no way to opt out of the Secure Boot lock down.
I am so surprised. The next step, of course, is to ban the disable-secure-boot option altogether. Just like everyone who knows Microsoft predicted.