You likely need to disable secure boot in the BIOS (if you didn’t already).

I’ve been super excited ever since I figured out that I can boot from external USB-C M.2 enclosures, like this one.

Performance is still quite good booted off external (Gen 3) drive, which allows me to use my whole internal drive for my primary OS rather than having to partition it for dual booting.