TBF, booting any Arm board is a mess. Rpi gets my kudos for frequently updating kernel sources, unlike any other SBC I have tracked. I know which gauntlet I'd rather run to enable secure boot on an Arm SBC., despite the weird architecture.