> You are right, but if we had an easily installable coreboot we could just ignore whatever comes with the computer and just flash coreboot over the existing firmware.

No, you couldn't. The move to secure boot means that firmware updates are signed, because otherwise you could disable secure boot simply by pushing out a fake firmware update.