I get that the warnings are there there to showcase a "known good" configuration, but on Debian 13:
- The deb package seems do the process of enrolling a MOK for signing the kernel module itself
- KDE + Wayland "just werked"
So the warnings about needing to disable SecureBoot and using X11 seem to be obsolete