Press Esc when booting to see text

The TPM could be used to generate a LUKS decryption key from a password or PIN.

That would tie that password to the hardware, but with LUKS you can have multiple ones, so a long password that directly unlocks the key should be possible in addition

Just learned that you can pipe tar into any compression tool, if that is not natively supported.

It has less integrity checks but huge performance benefits for sure

Sounds like tmpfs would be more reliable than streaming data directly?