I'm curious about an updated ADK as well as official guidance on how to address PXE w/ WDS:

"A new checkbox, Use Windows Boot Loader signed with Windows UEFI CA 2023, is available in the Data Source tab of boot image properties. When enabled, it updates the boot image to use the boot loader signed with Windows UEFI CA 2023. The checkbox automates the mitigation steps described in KB5025885.

The new functionality only works on WDS-Less PXE-enabled Distribution Points."