Yeah, if you’ve got two EFI partitions on separate disks and one is for Windows while the other is for your Linux, you’re good. Windows likes to reinstall its bootloader which sets it as the default and sometimes overwrites the Linux bootloader, but not if it’s on a different EFI partition, then it doesn’t “know” about it.

It won’t turn off your TPM, but if you’ve set it up correctly (by using PCR7), the TPM won’t allow decrypting your data without secure boot.

AdventureQuest Worlds my beloved