we're actually in the process of updating encfs to use XTS. also, that particular audit was done quickly and some of the analyses weren't done considering the threat-model that encfs is designed for (so it makes encfs look worse than it really is).
If the above (grand-parent) is the worst tptacek says about encfs, I would argue that you are in decent shape.