It was a serious ask to install it from auditors that don’t know what the fuck they are doing. On all ec2 machines for “reasons” I’m sure there are companies out there pushed into doing this because they don’t have people willing to die on those hills.

Probably would have been worse if this was on Linux. That’s like 90% of the internet.

Sadly that’s not entirely true

He’ll claim he invented it

My guess is this reset your bios as flipped a tpm setting on. Maybe see if you can disable all tpm/secure boot and see if it carries on.