this was it: Secure Boot was enabled by default in the bios. Turning it off allowed me to boot from my thumb drive.
Interestingly, now that I have linux installed, this^ is no longer true. I can no longer boot to usb, despite secure boot being disabled. Discussing over on this “Legacy boot / usb boot” thread though.