It's not necessarily the case. The kernel (and modules) is signed with some key and if not imported it breaks secure boot. As in you won't be able to boot kernel signed with the key.