There is also HTTPS boot, which might be a lot more secure than PXE

https://tianocore-docs.github.io/EDKIIHttpsBootGettingStarte...