How do you achieve FDE on a Pi type device? The author states the companies strict data policies, but seems the solution is carrying unencrypted data, and a modifiable boot environment in their wallet?

Not trying to point out any shortcomings, I honestly want to know if people reading this have a solution. Many people are relying on Pi(s) to self host data to keep it secure, despite the Pi as a platform not offering any protection in this regard.

EDIT: (Forgot to mention the Microsoft folding keyboard as the "best" of the super portable keyboards, which is still not that great, but has saved me when my MacBook has developed stuck keys)