It's very easy to bypass TPM / Secure Boot requirements and install Windows 11 on Ivy Bridge, though I'd favour going Linux anyways and make a Windows virtual machine for stuff like if you can't give up proprietary software.
That's just me. If you want to install Win11: Basically you just need Rufus to make your boot-able USB stick and you tick a box to disable the checks. That's it. On the same PC hardware it'll HWID activate, don't buy a key.
Or if it doesn't just use massgrave activator found in github.