Basically https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Using_your_own_keys

The process get’s worse each time I look at it so you choose if it’s worth it.

Maybe it works if you add custom secure boot keys and sign your bootloader?

won’t just boot straight into the OS, otherwise GRUB freezes (not dual booting, secure boot is off), so I have to spam F9 on startup

That would annoy me so much that I would switch bootloader or find a cmdline argument to fix it

But only to protect the children™ of course

Understandable have a great retirement

Next Year:

Breaking: Google will now only release Android source code once a year.