Here is some information from MS on this issue:

Driver Signing changes in Windows 10, version 1607

"Starting with new installations of Windows 10, version 1607, the previously defined driver signing rules will be enforced by the Operating System, and Windows 10, version 1607 will not load any new kernel mode drivers which are not signed by the Dev Portal. OS signing enforcement is only for new OS installations; systems upgraded from an earlier OS to Windows 10, version 1607 will not be affected by this change.

We’re making these changes to help make Windows more secure. These changes limit the risk of an end-user system being compromised by malicious driver software."

I think just for fun I am going to reset my UEFI bios for legacy install on a different drive and see how that works.........Security is smart but I do not think I need MS holding my hand with every step I take in life.........LOL