If you care about verified boot, you can let your phone boot in fastboot mode and issue a "fastboot boot" command from a trusted device. Combine that with plain FDE, and it's as secure as anything Qualcomm will support out of the box.