[pinusc]

It can range from trivial to impossible. Full disk encryption does not play well with hybernation on laptops, for example. There is also very limited support for hardware encrypted ssd... And even though it can potentially be a few arch commands away, you need to do a lot of reading to understand what you're doing and make informed choices about your setup. Which is hard.