Re: but the '...w.dll'
Wouldn't stop the NSA for long. All they need is a signing key or signing of their own bootloader. I can think straight away of three ways to get these:
1. Hack Microsoft. Either technologically, or via blackmail/bribery.
2. Super-secret national security letter demanding MS sign the NSA hack, or else someone goes to jail.
3. Hint that people with Influence really want MS to be cooperative on this, and the government is considering converting a couple of departments to Windows 10 and Surface tablets.