Depends on how much you care about security. Some distros are still very focused on “I operate my desktop in my locked house and don’t expect police to knock” use cases. If you’re chill with typing in a disk encryption password on boot you can turn that on, but getting a seamless secure boot+tpm decrypt is pretty challenging.

And then if that is what you want, people will of course happily tell you what a stupid insecure idea that is because Intel or Microsoft or something.