A lot can be said about prebuilt computers, most of it not good, however one thing they do tend to come with is security featured deemed necessary for corporate buyers. One such thing being TPM modules. This means you can have TPM enabled in a modern OS like Windows 11.
The HVCI functionality requires driver support since it goes down to kernel level. Older AMD and nVidia drivers often lack this and you are greetered by a "Windows cannot load this device driver" error upon booting with such drivers and HVCI enabled.
I can however confirm that even going back to Haswell from 2013 it is possible to (apart from the CPU requirement) have a Windows 11 install that ticks all the boxes, Secure Boot, UEFI, TPM and HVCI. The later is thanks to a driver update from Intel back in 2020.