I do /volumX for additional hard drives.

For most network share I use /mnt/$server.

Love it!!

Yes there is TPM for full disk encryption.

https://gist.github.com/orhun/02102b3af3acfdaf9a5a2164bea7c3d6#using-tpm-20

Do I had problem making swap partition work. As lockdown mode is triggered.

https://man7.org/linux/man-pages/man7/kernel_lockdown.7.html

I current only encrypted home.

Looks outdated.

I got a dell 2 in 1.

To be maintained, any software needs to be supported. If not supported and development, other options will prevail.

https://packages.debian.org/bullseye/broadcom-sta-dkms

https://packages.ubuntu.com/search?keywords=bcmwl-kernel-source

https://linuxconfig.org/how-to-enable-disable-universe-multiverse-and-restricted-repository-on-ubuntu-20-04-lts-focal-fossa

On a folder level that is how I work both in Linux and windows.

For single use encryption the is also GPG.

https://devconnected.com/how-to-encrypt-file-on-linux/

Edit2:

With Syncthing there is options to use a / partition / volume or a disk image. I am assuming you are using a linux desktop.

You can use tools like LUKE with Systemd-homed, where the home folder is encrypted, that get mount at login, and Syncthing service get started after mount.

I had forgotten about LUKE, have you tried it?

https://wiki.archlinux.org/title/ECryptfs

ECryptfs is the most common solution.

Edit: LUKE can also used:

https://wiki.archlinux.org/title/Dm-crypt/Device_encryption

https://wiki.archlinux.org/title/Systemd-homed

http://www.lpenz.org/articles/luksfile/

For me it is slow to start.

It make chrome crash, unless Bitwarden is manual killed.

Your previous post did register, be patient.

It gode write up from zygo

what about write hole?

There is a write hole issue on btrfs raid5, but it occurs much less often than the other known issues, and the other issues affect much more data per failure event.

https://lore.kernel.org/linux-btrfs/20200627032414.GX10769@hungrycats.org/