You'll probably want to uncheck wireguard and the X.509 parsers in there too if you don't use them (they can be used to do things like verify signatures on an executable before running it, but very few people use that feature).

There are just SO MANY options in the kernel now, plan on taking a few hours to go through it. 🍵