Secure Boot ensures only trusted, digitally signed operating system loaders can run during startup, preventing rootkits.