Javelin checks the boot process itself, and Secure Boot is the setting that makes that check possible.