[Eeems]

gocryptfs is available in toltec[0]. So you could in theory add full device encryption behind a password on startup. I know there has been some work on creating a UI for this kind of setup, but I don't know if anyone has actually released one yet.

0. https://toltec-dev.org/stable/

[mintplant]

The UI stuff is here: https://blog.redteam-pentesting.de/2021/remarkable-encryptio...

[Eeems]

That's one of the UI solutions You can also find the source here: https://github.com/RedTeamPentesting/remarkable-encryption.

There is also https://github.com/plan5/remarvin