If you have secureboot enabled and in Windows friendly mode, you can get validation failures with Ventoy until you either turn off secureboot, register the Ventoy MOK key, or change your secureboot setting to Generic OS (or whatever).

Kind of a pain, I think any machine that's had windows on it will get this setting enabled.