One practical note before changing it in either direction: know how to get back into firmware, and check whether disk encryption is involved.
On some machines, changing Secure Boot state affects the platform module that may be holding a disk encryption key, and the machine then asks for a recovery key you have never seen. That applies to both Windows and Linux setups using it.
So: find the recovery key first, write it down somewhere off the machine, and then change the setting. Doing it the other way round is a memorable evening.