On some fronts it even feels like things have regressed. Trying to resize an encrypted partition is way, way too difficult. And it seems like GParted doesn't handle LUKS so you're back to manually typing block offsets on the command line.

If you wanted to use a TPM to store the FDE passphrase, well, you have the patience of a saint. Compare this to Mac or Windows where you click a single button and it's all setup, including TPM!

As much as I love linux for server environments, it remains a failure when it comes to modern desktop environments.