Be aware EDK II has a recent severe CVE to watch out for.

https://app.opencve.io/cve/CVE-2026-97631

That's just in the PXE driver AFAIK.. shouldn't be an issue here.