Neither Secure Boot nor TPM is essential to the day-to-day operation of the computer. The two are so non-essential that hardware vendors often disable them by default. I've never used them, and virtually all Intel-based Mac computers don't have TPM. They are likely excuses for Microsoft ...