I'm a fellow rooter also concerned about device security. I think full disk encryption, with the unlock key encrypted with a passphrase not stored on the device

I'm a fellow rooter also concerned about device security. I think full disk encryption, with the unlock key encrypted with a passphrase not stored on the device gives me more than the security that was lost by rooting my phone. Even recovery can't touch the OS or my files without me feeding it the passphrase.