Was fairly leery of how useful I thought this would be, but you reference the FAQ[1] early in what I assume is an attempt to head this off, and it delivers adequately. Despite being predisposed going in thinking it was probably not worth the janky stuff you would have to do to get it working, the level of detail and thorough covering of some fairly complex attack vectors leaves me thinking that while not as secure as no automatic boot method for encrypted disks (obviously), it would definitely be a step up over not encrypting and something I would recommend without worrying that I was increasing the burden of managing the systems to a level an organization would be unprepared to deal with.

Not that I'm some professional security researcher or anything, but congratulations, color me impressed.

1: https://www.recompile.se/mandos/man/intro.8mandos