I have a fresh installation of Kubuntu 20.10. In the installer, I chose the option for full-disk encryption. The partition holding my system (the one mounted at /) is now encrypted.

But /boot is still un-encrypted. This exposes me to evil maid attacks.

The most updated how-to guide for full disk encryption in Ubuntu (including /boot) I have found dates back to 2019, would have me to reinstall everything from scratch.

I already have the system partition encrypted, now I only need to encrypt /boot.

Is there a way to encrypt the /boot partition without having to reinstall everything?