I have a suggestion for Tails to help make it even more secure. Whether they listen and implement is another thing.

Encrypted Persistence Why is there no option to create an encrypted persistence on Tails?

My suggestion is that in the installation option, when you create an instance on another USB, there should be an encrypted persistence option.

I understand that this may not be easy, as creating persistent storage on a USB in linux is not straight forward, but this task can be completely automated by the Tails team and hidden from users.