A little bit of time searching online will be the most productive since at least a few are hardware specific. I tried a few word perfect searches of options with rufus before them and got very explicit guides.
Even on qualifying hardware I uncheck TPM/RAM/SB.
A few like create local account named ___ have shown to be a little dodgy on some systems. Even more so, preserve current local account.
Setting region and blocking data collection is a given in most cases.
Beyond that here is a link on the
rufus FAQ for more technical options.