Two thoughts are in my head, both equally valid:
OpenSSD port tunneling is the best thing ever. It's the reason I can do a lot of things that I do.
It's stupid that Debian's installer doesn't let you continue after partitioning when putting /boot inside an encrypted volume; you have to manually change it after the fact. Which makes sense, they want to prevent you from making an unbootable setup, right?
Except that encrypted /boot is fully bootable in Libreboot. See: