>Root: encrypted
>Secure Boot: enabled
>TPM2: emulated
>Bootloader: signed
>UKI: generated
Yep, it's secure computing time