Exactly! They even took care to provide you with convenience scripts for further setup with very detailed description right after you open the terminal.

Enabling TPM based disk decryption, secureboot, upgrading everything etc etc is waiting for you just one command away starting with ujust