Am 23.10.2023 um 12:04:35 Uhr schrieb Michael Kjörling: > Encrypted /boot has been supported with GRUB 2 for a while. That > leaves only a minimal portion of GRUB in plaintext on storage. Although it is not default, so users should be aware that they need to do additional steps to encrypt /boot.