When I first used rEFInd I didn’t configure it and it still detected windows and arch. I only configured it to change the theme and to make adjustments to the kernel command line. It is a very simple bootloader that is advanced and has waaaaaay less CVE’s if not any.
I’m in the process of moving over to UKI and so will remove the bootloader entirely and at that point will just use UEFI boot loader (F12) to change OS/kernel.
I have a systemd timer that fires a script that in turn SCPs things off to my nas. That’s enough for me and it’s proved it’s worth in the past when another system went belly up.