More reading, I learned POP!_OS may be private but the emphasis doesn’t carry over to security. Unlike Ubuntu, it’s not setup to work with the Secure Boot feature of newer computers. The recommended work around is to disable this feature for all operating systems installed on the machine. Not sure I want to do this.