Well, yeah, you cant simply enable it and expect %Random Software% to be recognized as secure.
Unlike the hardware manufacturer and m$oft, there is no existing framework or agreement for there to be acceptable keys for %Random Software%. At least not ‘preloaded’.
This is pretty much accurate.
Never was.
Its still in the same state it was always in - you can, but you have to do it yourself.