I highly doubt an OS or an application would be writing to the unencrypted boot sector or an unencrypted boot partition. At some point, some partition somewher

I highly doubt an OS or an application would be writing to the unencrypted boot sector or an unencrypted boot partition. At some point, some partition somewhere will need to be unencrypted, otherwise the system cannot boot, since the decryption programs are typically too large for a single boot sector. I'm not advocating against "full" disk encryption. That's what I use. I just wanted to say that the OP doesn't need boot volume verification and that Bitlocker is sufficient for his needs.