Secure boot mainly gets annoying if you have an Nvidia card, since the akmod needs to be self-signed. It's not insurmountable but you have to load your keys into the UEFI before it'll work.

Bazzite builds the Nvidia driver into its kernel, so you don't need to do anything special. Post installation it prompts you to do key enrollment, so all the user needs to do is select "Enroll MOK" and type "universalblue".