diff --git a/stand/efi/loader/main.c b/stand/efi/loader/main.c
index 9604f16a2480..2dc7924b9fcd 100644
--- a/stand/efi/loader/main.c
+++ b/stand/efi/loader/main.c
@@ -146,7 +146,7 @@ EFI_LOADED_IMAGE *boot_img;
 enum boot_policies {
 	STRICT,
 	RELAXED,
-} boot_policy = RELAXED;
+} boot_policy = STRICT;
 
 const char *policy_map[] = {
 	[STRICT] = "strict",