I have always left /boot unencrypted as I assume this is the first thing what the uefi reads. I am trying out cachyOS and this is what I saw for grub: I am surprised that you can have encrypted /boot with grub, how would this work even, how would the computer read an encrypted /boot in the first place? Does Limine by any chance also supports this?