Hi Brian
There is an existing feature request for full disk encryption on all supported device types here: Surface secure boot and full disk encryption in balenaCloud. We aren’t working on the pi 5 currently but we’re getting closer to enabling it on the CM4, you can follow this feature request for updates on that: Enable secure boot and disk encryption for CM4
Hope that helps!