Updated the BIOS on my MSI B450 Tomahawk.

MSI did not change the default Secure Boot setting of “Always Execute”. Changing it is still locked behind enabling custom mode and the options are reduced to “Hardware/OS Compatibility” (which is Always Execute) and “Maximum Security” (which is Deny Execute).

Also, just like every BIOS update, I needed to reconfigure settings and fan curves again.

MSI, I understand if you dislike Secure Boot (since you also dislike the concept of security), but just sell your motherboards without Windows 11 compatibility instead of providing misleading defaults.
What I find confusing is that it is possible to save fan curves in an "OC Profile", but these are not compatible across BIOS updates.
Another surprising part is that Windows doesn't seem to detect if Secure Boot is set to "Always Execute". It just acts like it's working as intended, which is kind of funny.