Been doing a lot of reading on Linux encryption techniques, and one that I've come across is encrypting the /boot directory by keeping it on the same partition as the root. I recall reading somewhere that if you encrypted your /boot, you would need to modify GRUB or something every time your system updated. Can't remember where I read that, so not 100% sure if it's true or not. Are there any other disadvantages of having /boot encrypted?
In the process of setting up LUKS encryption on my Ubuntu partition, I came across the --type luks2 option in the cryptsetup man pages. From what I've read, there don't appear to be any reasons not to use LUKS2, but cryptsetup still uses LUKS1 by default.
Any reason I shouldn't use LUKS2?
Thanks.