Looks like the root cause is the `-flto=auto -ffat-lto-objects` build flags used in debian/rules and `--buildtype=release` (implies -O3). Building upstream 260~rc3 with either of them produces an EFI binary that doesn't work on my (possibly buggy) firmware. While removing them produces a working one.
Bogdan
