Against the evil maid you are supposed to use SecureBoot together with full disk encryption and TPM.

If someone disables SecureBoot, then the encryption keys become inaccessible and you will notice that something is wrong.

I don't quite understand your wipe the disk thing, since that will leave a trace, the attacker could just smash your computer or take out your drives.