GRUB since 93a786a00 (kern/efi/sb: Enforce verification of font files)
has enforced verification of font files in secure boot mode. In order
to continue to be able to load some default fonts, they are added to
the built-in memdisk bundled with a signed EFI image and may be
accessed by file name prior the actual default path.