I prefer to use Secure Boot when it makes sense. It completely shuts down lots of incredibly hard to detect forms of malware. Its nice knowing the boot environment is exactly as I intended and hasn't changed.