a simple BIOS/UEFI setting change, or windows update could trip the Secure Boot settings they could work around that though, but I still agree that backing up the passphrase to an arguably safe online system is good