Phil Wilson: Hey Kyle!
Whilst I can’t give you specifics (I mean I could, but they would be guesses and almost certainly wrong) I can tell you that this is a current focus for our OS team. They are finalising secure boot and FDE for the x86 device types Enable secure boot and full disk encryption for x86 device types
which includes backend components necessary for signing release artifacts, which will also be needed here.
Currently secure boot for the Pi4 (and Pi4CM) is being worked on as we type.