Migrate to using Unified Kernel Images
According to the Arch wiki:
A unified kernel image (UKI) is a single executable which can be booted directly from UEFI firmware, or automatically sourced by boot loaders with little or no configuration. It is the combination of a UEFI boot stub program like systemd-stub(7), a Linux kernel image, an initrd, and further resources in a single UEFI PE file.
This would make supporting Secure Boot and systemd-sysupdate easier by simplifying our boot stack.