I finally made the move to install Bazzite on my ROG Ally recently, and I can't imagine playing this Steam Deck rival without it going forward.
Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.