@w4tsnhttps://221b.uk/safe-automatic-decryption-luks-partition-tpm2: What is the point of encrypting your drive when it can be decrypted by itself, no password or security card/key required (if I am understanding your article correctly) giving unwanted entities access to your decrypted drive?
The idea behind "self-encrypting drives" as per #OPAL spec is to formally comply with #PCIDSS without using any good OS that does decent & secure crypto.