That's a cool setup! I didn't know about Heads. And yes, getting back to the original topic, I believe that against petty criminals, even a full disk encryptio

That's a cool setup! I didn't know about Heads. And yes, getting back to the original topic, I believe that against petty criminals, even a full disk encryption is plenty defense. They won't go about installing anything to the EFI partition just to get to the data. This Coreboot + Heads setup I'd trust to protect against even the more involved.