Hi are they Enterprise or Business licenses? I also did not have trusted launch or secure boot when I had a business licence a few months ago. I switched back to just standing up VMs and connecting with a VPN gateway, and was going to stay with that because I had thought I had read that trusted laucnh and secure boot were not supported, and also the new encrypted at host functionality that just launched, but when I looked into it again it looks like Trusted Launch and Secure Boot, as well as possible encryption at host, is enabled in Windows 365 enterprise. The encryption section in the Windows 365 enterprise documentation also seems to indicate that encryption at host is enabled. but it is unclear. With that said, I wouldn't know, because while I have bought a license for Windows 365 enterprise, the ability to create a provisioning profile with AAD joined device is not yet enabled in my tenant, which is infuriating.
Blog | Windows 365 - Enterprise support for Windows 11, Cloud PCs (microsoft.com)