> -> current state is irrelevant. The intention to (not) use secure boot is expressed in that config setting, and that's the only place to look.
I have no clue about /etc/sysconfig/bootloader. Why is it relevant at all? The
only setting that really matters is the BIOS setting. I have enabled or
disabled SB a lot of times, without ever touching /etc/sysconfig/bootloader.