I found endeavour (arch) to be a much simpler experience vs fedora or opensuse or void. Tpm chip worked right away, clear instructions for setting up secureboot with a hook that signs everything as it’s updated, etc. I could barely get void to boot, opensuse worked well but after a power outage the tpm stopped working and I was never able to get it back, fedora I had no success with tpm. I’m sure that’s all pretty variable depending on hardware.
If you aren’t looking for full functionality of your hardware most any distro should be fine, but…why sacrifice security?