I think it's fine. For the limited threat model FDE is equipped to handle, XTS does the job. I'm not sure what the best answer is to your second question. I wo

I think it's fine. For the limited threat model FDE is equipped to handle, XTS does the job. I'm not sure what the best answer is to your second question. I wouldn't use TC for that. I would typically use PGP, but I don't think it has a good UX for general consumption. There may be room for someone to build a better product.