I’m on windows 10.

I occasionally like to play valorant with friends and starting in the middle of this month it’s going to require TPM 2.0 to be enabled. I currently can’t easily enable it because I’m on legacy BIOS for a reason I can’t remember (and when I switch to UEFI, it can’t see my windows installation). I have a new SSD that I can format in hopefully the right way to enable UEFI in the BIOS, but before I dive into fixing this mess I have some questions about TPM 2.0.

1. If I enable TPM 2.0, can windows decide to update to windows 11 without my input?

Edit, I looked into this a bit and windows makes it very very easy to click to install windows 11. It’s kind of disguised as a regular windows update notification :/

2. Are there any downsides to enabling TPM 2.0? Are there any exploits I should be worried about? Will some legally acquired software not run anymore?
3. Bonus question - why would Riot Vanguard (valorant’s anti-cheat software) need TPM 2.0 to be enabled? Would it be a way for them to stop players from playing on a virtual machine? Or is it more so they can stop cheaters?