Everything sounds good. It really should be setup and used like any other linux distro.
except asking every 5 minutes. That sounds kinda sucky. Im wondering how sudo su would work?
Anyways much more info here:
https://www.raspberrypi.com/news/a-security-update-for-raspberry-pi-os/