First, I felt happy after I found this forum thread. I downloaded the scripts, executed Check_UEFI-CA2023.ps1 and was astonished then.
The script displayed:
Secure Boot: OFF (Audit Report runs as ON)
Virtualization Based Security: ON
BitLocker on (C:) OFF
UEFI KEK Certs
--------------...