Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.
You mightn't think it, but the Windows 11 Recovery Environment is genuinely powerful.