If you care enough about privacy to require full disk encryption, we're now providing an on-device installer image which enables FDE on the #PinePhone: https://images.mobian-project.org/pinephone/installer/
Flash it to an SD or the internal eMMC and follow the instructions :)