it mainly lacks good UI/UX tools to do so and an agreement on what the right approach is, especially if combined with raid

without raid it's not too hard, just bothersome and finding the right information can be annoying

the main gotcha is that lockdown mode is incompatible with hibernation (no matter if it's encrypted or not) and some distros enable it by default when secure boot is used, which is most times the case with a full disk encryption setup