[NAME] - I'd enable: BIOS Auto Recovery and Always Perform Integrity Check. And I'd disable UEFI FW Capsule Updates and (unless you need it) Wake by Integrated LAN. That's how BIOS on my XPS 8930 is set.  Just keep in mind that every time BIOS gets updated, these settings revert to their defaults, so you'll need to stay on top of things, if you make any of these changes.
Below is a list of my BIOS settings on my 8930.  This was made after the update to 1.1.20 BIOS.  Some of you regular contributors with a lot of knowledge give me ideas about anything you see I could change, or some of the things you turn off/on that are different from mine.   I don't really know what some of these settings really are anyway. Thanks. Dell XPS 8930 BIOS Settings 1/27/2022                                                               Main Main BIOS Version     1.1.20 Product Name            XPS8930 Service Tag     ******** Asset Tag        none CPU Type        3.1 GHZ Intel i9 9900 CPU Speed      3100 MHZ CPU I.D.           906ED CPU Cache      L1 572KB         L2 2048 KB      L3 16384 KB First HDD        (S1) Samsung SSD 840 EVO 2506 GB SATA ODD       HL-DT-ST-BD-RE-BUYON-(S2) M.2 PCIE SSD PM981A NVME Samsung 2048 GB. (SO) 2048 GB. System Memory 32768 MB (DDR4) Memory Speed 2666 MHZ                                                               Advanced Intel (R) Speed Step TM         Enabled Hyper Thread Control            Virtualization  VT for direct I/O  SATA Operation         RAID ON Intel S.W. Guard (?) 128 MB extension allocated mem size BIOS recovery from Hard Drive         Enabled BIOS Auto Recovery               Disabled Always Perform Integrity Check        Disabled USB Configuration     Front and Rear are Enabled                                                               Power Options Wake by Integrated LAN                   Enabled Deep Sleep Control                            Disabled Auto Power On                                   Disabled USB Wake Support (S3)                      Enabled Auto Power On Mode            (Selected Day) Auto Power On Date              15 Auto Power On Time              12:30:30 NUMLOCK Key                        Enabled                                                               Security Unlock Setup Status                           Unlocked Admin PW Status                               Not Set System PW Status                              Not Set HDD PW Status                                  Not set   Asset Tag         Admin Pw HDD PW Password Change                   Permitted Computrace                            Deactivated Firmware TPM                       Enabled PPI bypass for clear command          Disabled UEFI FW Capsule Updates                 Enabled   Secure Boot                            Standard Key Management                  Blank nothing showing UEFI Boot Path Security         Always Except Internal HDD.                                                   BOOT Boot List Option                                 UEFI File Browser Add Boot Option File Browser Del Boot Option Secure Boot                            Enabled Legacy Options ROMs            Disabled Attempt Legacy Boot             Disabled Enable USB Boot Support      Enabled Boot Option Priorities Boot Option 1                         Windows Boot Manager Boot Option 2                         Onboard NIC (IPV4) Boot option 3                         Onboard NIC (IPV6)                   
XPS 8930 BIOS Setting Suggestions