Yes, you can replace Main with Chipset if that is what you really want.
Yes, always the plan >> Advanced >> replace with Advanced 2
I'll change the Optimal for the default Advanced using AMIBCP << That makes no sense to me, if you swap advanced nothing else needed, especially with AMIBCP, all settings will be right in front of you in the BIOS

Yes, I can disable secure boot by default, and then replace security tab (with boot 2, or chipset)
If you want to keep Main, then replacing this with chipset would be ideal, if you want to replace main with chipset then you can replace this with boot 2
Until programmer arrives, for safety reasons, you can only have 5 x main BIOS entries, whatever you want those to be

Main -> Chipset
Advanced -> Advanced 2
Security -> Boot 2

Save & Exit -> Save & Exit 2 (if it's safety)

"I'll change the Optimal for the default Advanced using AMIBCP" -> Means that I need to disable some things in the Advanced tab (for macOS) and I'll do it using AMIBCP if it's replaced by Advanced 2

Thanks for the desired menu edit list!

Everything in the default advanced is also in the hidden advanced usually, so you wont need to change anything with AMIBCP. Due to the many more sections, you may not find a certain setting in same place or same submenu in the other advanced though, so maybe you are missing it.
What settings are you concerned about in the original advanced, I'll confirm and tell you where they are in the hidden advanced.

Please edit your posts if you need to add more thoughts, especially if no one else has replied yet - thanks!

Yeah, checked all what I need (Intel Virtualization, AES-IN, VT-d, EZ Flash 3), it's in the Advanced 2 already (it's awesome)

Found out that I have all Boot sub-items (like CSM) in Main 2 + Boot 2, maybe it's better to have Main 2, Chipset, Advanced 2, Boot 2 ??

The Save & Exit tab

Main -> Chipset
Advanced -> Advanced 2
Security -> Boot 2

Save & Exit -> Save & Exit 2 (if it's safety)

or (if you think that Boot 1 is not necessary)

Main -> Main 2
Advanced -> Chipset
Boot -> Advanced 2
Security -> Boot 2

Save & Exit -> Save & Exit 2 (if it's safety)

Main 2 does not contain any settings, only informational entries, shows you info like the original Main.
The only setting in original Boot that is not in Boot 2 is Launch PXE option rom (Boot from LAN- disabled by default) - so unless you actually use that, you really only need Boot 2 (and PXE LAN Option can be enabled by default if you want, and still hidden in Boot 1 menu, replaced by Boot 2 instead)

Thanks for Save & Exit BIOS image

Please edit your posts if no one has replied yet!!!

* Edit - @asusguybios - please confirm this is OK, and this is what you want for now
Main -> Main 2
Advanced -> Advanced 2
Boot -> Boot 2
Security -> Chipset
Save & Exit -> Save & Exit 2

Ok, so Main 2 has all needed from Main (so we can replace), Advanced 2 has all needed from Advanced (so we can replace), Boot 2 has all needed from Boot (so we can replace), Security does not have any necessary settings (so we can replace)

Main -> Main 2
Advanced -> Advanced 2
Boot -> Boot 2
Security -> Chipset
Save & Exit -> Save & Exit 2 (if it's safety)

Is this the best configuration?

Main 2 does not have "MAC Address" but this was hidden from you by default in the original Main anyway
Yes, that would be how I would do it Editing now

@asusguybios - please send me image of the setting you see in BIOS where secure boot is enabled by default, the one I see (Secure Boot Control) shows it's disabled by default, need to confirm we are looking at same item

MAC Address is hidden because my laptop doesn't have Ethernet port (and probably the lan system on motherboard)
I can connect by lan only using USB3 -> Ethernet adapter

I understand, I'll take photos of all menus

MAC Address option is always hidden from user anyway, unless maybe when LAN is plugged in, I've never seen it show up in anyone's MAIN BIOS image unless I enable it, but that may be due to LAN cable not connected at the time too.
Please see my edit above about Secure Boot, thanks

It's enabled by default

Load optimal defaults and check that again, it's disabled by default, at least that's how it shows in Setup and AMITSE/SetupData (AMIBCP), only enabled at Fail Safe by default and you can't load that on Asus BIOS

That photo is after loaded optimal defaults

Do not care about it, I've deleted secure boot keys and it's not working anyway

Secure Boot: Not active (check the photo)

Thanks for confirmation, I will check and edit in all NVRAM/StdDefault instances as well then.


* Pre-post Edit - OK, so for now it's disabled due to keys deleted and we don't need to worry about it, hopefully that carries over into mod BIOS from your FPT dump then. if not, we may need to re-enable this menu so you can disable again or windows might not load.
If this happens, flash in your original FPT dump and wait, I'll redo BIOS and disable in all instances of NVRAM and StdDefaults too.

Is my file name UX550VE-ORIGIN.bin ? If yes, it is the normal (I've remove keys before this dump)

Yes, I'm editing that FPT Dump - stock keys are always there anyway, so you can reload if needed, but I meant if you can't load windows due to this being enabled by default in some other area of the BIOS I'll need to edit later, then you wont be able to access these settings unless you flash back to stock FPT dump, due to we're removing security section.