My primary pain point, last time I did the research, was that UBPorts for example, doesn't support full-disk encryption.

That might have changed by now, and I'm not sure about the others. But I'd say encryption-at-rest is a basic requirement for a privacy-enhancing OS.