Ubuntu's Install medium supports secureboot. (As do many other Linux install mediums) I assume ventoy requires SB to be OFF, which does complicate things more, than just using Rufus.