Not sure if now grub finally supports decrypting luks2 encrypted boot partitions. Hopefully it does… One of the commenters mentioned it…