Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.
I finally made the move to install Bazzite on my ROG Ally recently, and I can't imagine playing this Steam Deck rival without it going forward.