I have my fedora technical security report here. What can I do to fix some of this?:

Device Security Report
======================

Report details
  Date generated:                                  2025-06-30 21:58:30
  fwupd version:                                   2.0.12

System details
  Hardware model:                                  Acer Swift SFG14-71
  Processor:                                       13th Gen Intel(R) Core(TM) i5-1335U
  OS:                                              Fedora Linux 42 (Workstation Edition)
  Security level:                                  HSI:1! (v2.0.12)

HSI-1 Tests
  UEFI Platform Key:                               Pass (Valid)
  Firmware BIOS Region:                            Pass (Locked)
  UEFI Bootservice Variables:                      Pass (Locked)
  MEI Key Manifest:                                Pass (Valid)
  Intel Management Engine Version:                 Pass (Valid)
  Firmware Write Protection Lock:                  Pass (Enabled)
  Platform Debugging:                              Pass (Not Enabled)
  BIOS Firmware Updates:                           Pass (Enabled)
  Intel Management Engine Manufacturing Mode:      Pass (Locked)
  UEFI Secure Boot:                              ! Fail (Not Enabled)
  Firmware Write Protection:                       Pass (Not Enabled)
  TPM Platform Configuration:                      Pass (Valid)
  Intel Management Engine Override:                Pass (Locked)
  TPM v2.0:                                        Pass (Found)

HSI-2 Tests
  Intel BootGuard Fuse:                            Pass (Valid)
  Intel BootGuard Verified Boot:                   Pass (Valid)
  Intel BootGuard ACM Protected:                   Pass (Valid)
  Intel BootGuard:                                 Pass (Enabled)
  IOMMU Protection:                              ! Fail (Not Found)
  TPM Reconstruction:                              Pass (Valid)
  Platform Debugging:                              Pass (Locked)

HSI-3 Tests
  Intel BootGuard Error Policy:                    Pass (Valid)
  Pre-boot DMA Protection:                       ! Fail (Not Valid)
  Suspend To RAM:                                  Pass (Not Enabled)
  Control-flow Enforcement Technology:             Pass (Supported)
  Suspend To Idle:                                 Pass (Enabled)

HSI-4 Tests
  Encrypted RAM:                                 ! Fail (Not Supported)
  Supervisor Mode Access Prevention:               Pass (Enabled)

Runtime Tests
  Linux Swap:                                      Pass (Encrypted)
  UEFI db:                                       ! Fail (Not Valid)
  Firmware Updater Verification:                   Pass (Not Tainted)
  Control-flow Enforcement Technology:             Pass (Supported)
  Linux Kernel Lockdown:                         ! Fail (Not Enabled)
  Linux Kernel Verification:                       Pass (Not Tainted)

Host security events
  2025-06-24 22:56:24   Linux Kernel Lockdown      ! Fail (Enabled → Not Enabled)
  2025-06-24 22:56:24   UEFI Secure Boot           ! Fail (Enabled → Not Enabled)
  2025-05-11 08:47:20   IOMMU Protection           ! Fail (Enabled → Not Found)
  2025-05-11 08:47:20   Pre-boot DMA Protection    ! Fail (Enabled → Not Valid)
  2024-12-31 22:24:01   Linux Kernel Lockdown        Pass (Not Enabled → Enabled)
  2024-12-31 22:15:27   Linux Kernel Lockdown      ! Fail (Enabled → Not Enabled)

For information on the contents of this report, see https://fwupd.github.io/hsi.html