TLDR: The Atomic Desktops where just shipped with no way to update the bootloader.

Thus the shim signatures were outdated and newer kernels couldnt boot anymore.

The fix is to manually update the boot things by copying files, there never have been reported issues with the fix, and bootupd will be likely, finally, added to Fedora 41