If I recall, most of the universal blue images are using systemd-cryptenroll for TPM backed encryption, uCore appears to be an outlier in that they appear to inherit the CoreOS approach of using Clevis.
It’s unclear to me what is preferable, and what would be the more robust/reliable and secure option. I have a better intuitive grasp of LUKS and systemd-cryptenroll so–all things equal–that would be my preference, but when it comes to encryption I like to stick with the crowd and with the suggested and supported path, so I’m seeking input from others. What do you do? What do you recommend?