ventoy is pretty useful even if it is potentially risky. they found a way around the secure boot problems (https://ventoy.net/en/doc_secure.html) and i will be the first to admit that i enrolled their keys on the devices i use.

i am still waiting for an ergonomic way to have a persistent usb install of a linux distro, which does not kill the flash storage over time. till then, i got similar levels of trust of the tool as i do with using windows.