If distros signed the bootloaders with their own keys, then I would configure my system to only use those keys and not include Microsoft’s.

12th gen alder lake seems much better at s0 sleep than my 8th gen one. Less battery drain.

Graphene has been good at getting security and feature updates out the door quicker. For that reason (and that google telemetry will happen no matter what OS), it’s much more secure.