Last time I was starting vanishing of Ethan Carter, but even though it was playable, the experience wasn't free of stutters, whereas windows ran flawlessly.
In any case, it is always nice to jump back and check out how far Linux has come.
I'm of course ignoring the fact that a lot of Linux distros still do not have Secure Boot enabled by default, and therefore do not enforce any kernel driver signing policy.
Everyone can load their own signing keys into firmware. However, if you want something that "just works", Microsoft signs a package called Shim[1] that can be loaded on most computers due to the pre-loaded keys.
A relationship with Microsoft is not needed in any way or form to have Secure Boot.
AFAIK if a manufacturer wants to sell Windows PC, it has to support secure boot.