I remember when I got into this a year or so ago I was able to get some more check marks by enabling “Use OS defaults” or the like in my UEFI and then resetting the UEFI to default. Even still as someone mentioned I have a failure in every level, so I’m HSI-0. Whatevs, maybe when I get a new laptop when this one dies it will be better about it.
(Found the old thread on this)