TIL: use the mokutil command to check if Secure Boot is enabled.
secureBoot:~$ mokutil --sb-state
SecureBoot disabled
“The mokutil command is used to manage Machine Owner Keys (MOK). These keys are used by the shim layer to validate grub2 and kernel images and can also be used to verify that Secure Boot is enabled.” https://www.kvaser.com/developer-blog/secure-boot-linux-systems/