I've run virtualization-based security on E5-2697v4 Broadwell, and the added security is both a negligible performance impact and very much worth it.
However, I don't appreciate being bullied by Microsoft into buying more expensive hardware and an entirely new platform, while the current state of software development hasn't progressed sufficiently to leverage the CPU cores I've already bought.
The message Microsoft sends by imposing these restrictions is alienating to customers, and decisively negative. In light of the unfixable/unpatchable flaws that have recently come to light in UEFI, the continued imposition of the requirement on the population reveals Microsofts claims (that these security features are foundational to Windows 11 proper functioning) as false to an even greater extent than we all are aware that it is.
If Microsoft's strategy is to be seen as a false prophet, charlatan propagator of obvious lies, then I suppose the current strategy is working. But let's be clear, no one out in the real world, by now, is fooled.