I decided recently that I'm done being a boomer. Most decent machines have like 16GB of RAM at minimum, so I can afford to run KDE instead of XFCE. And like everything I own has had EFI support for years. So I should probably start building my Arch Linux installs with support for that, instead of MBR crap.
The one thing I wish I could do is encrypt the boot partition, but that slows down boot time a fair bit in my experience. When you do boot encryption, GRUB has to decrypt your password (which it doesn't do very efficiently, so it takes a bit of time to unlock your key), then hands it off to initramfs to then unlock main boot partition. This obviously kinda sucks turds. You're remounting stuff over and over again. Ideally you only want it mounted once, maybe twice if you have to.
The way GRUB prompts for a password is also quite awkward -- nothing like the smooth UI you can get from an initramfs prompt. By default, if you enter the wrong password once, it just gives up and moves straight to a GRU