This is the only security sensuous forum that I am part of so I hope you guys can answer my question.
I'm using a Windows 11 Enterprise install on a Lenovo Z13 gen1 laptop locking down as much as I can with a separate user profile that I do my browsing on, have my backups and do some occasional gaming on.
I've locked down my BIOS, enabled all the security features that have toggles in the settings menu and added extra hardening via gpedit releated to secure boot, only good and known drivers enabled etc.

All of my serious files and backups are either in peergos or in my pixel with grapheneos.
Currently I'm wondering what exactly I'd be losing out on by switching to a linux distro like fedora or secureblue. Does anything like verified boot exist on linux? I've seen that u-boot has some kind of measured boot solution but nothing that secureblue or fedora have implemented yet and it seems like everyone in the linux community treats security like some kind of a joke.

My current threat model is that I'd like to stop having my data harvested by microsoft but I hope I am mitigating it by having a mullvad vpn always on.
I'd hope you guys could give me some serious pros and cons about leaving windows behind. I am currently running fedora and secureblue using hyper-v and I had experience running couple of distros earlier in my life.

Also my future threat model might include some light whistleblowing and contact with journalists to fight corrupt local government so once again I'd hope to be prepared on what to avoid doing when using an x86-64 device.
I know most of you will focus on reading this paragraph and just keep hammering that I should use qubesos or tails or other specialized solutions but I am really hoping to use my laptop in the spirit of what the secureblue project is trying to accomplish. If I'd really have to be that super secure I'd rather trust a pixel grapheneos device than my laptop with my life.

Thanks in advance.