I was wrong about booting only Windows, but this is because Microsoft still allows Ubuntu images to be signed with their master key. These machines are locked down to run only those systems Microsoft explicitly permits.