Love OCLP, but there’s definitely a trade-off in terms of root-of-trust security.

I keep an old iMac for family browsing and some school work that’s running Ventura thanks to OCLP, but not allowing anyone to sign in to iCloud on it due to not having a trusted bootloader.

This is perhaps overkill and it sucks that it’s a choice that needs to be made at all.