+1 for uBlue. I did the same for my mother on her laptop and desktop PC for office work. Chose Aurora in this case. Setting system and flatpak updates to automatic means I hopefully never have to look after these systems again as the distro maintainers basically do the maintenance. Setting up Secure Boot with the shim/MOK method and TPM auto-unlocking for full disk encryption using the ujust
scripts is a breeze as well.
I use Secure Boot on all my machines but I just use my own keys with Foxboron’s wonderful
sbctl
utility instead of the hacky shim/MOK method most distributions use.