Here's a closeup of the mount bracket of the Thermalright heatsinkfan:
idle nicely stays at 10W (edit: newer uni-t ut230b says 12.0W) after adding an Intel AX210 wifi+bt card.
Will check with Asrock if there's a way to enable C6 CPU, as I'd like to reduce power consumption.
Other steps to test: underclocking/undervolting - if that's a useful approach to achieve lower power consumption under load.
And while I love the aluminium look of my mini-itx case (MS-Tech CI-70), it's rather impractical as it doesn't have many holes in the cover, reducing much-needed airflow under load and doesn't offer a half-heigh PCIe slot in case I want to add 10 Gbps networking through one of the two M.2 slots (not envisioned right now, but maybe in some years).