system76 is great
I recently upgraded to the 24.x version that runs Cosmic DE. While I loved the visuals and design, the whole OS was buggy. The GitHub issues about memory leaks I faced related to cosmic have been open for a while.
With CachyOS having ZFS in the installer, you can just natively encrypt your setup with an officially maintained project, USB drives are usable too.
After this you can use zrepl to autosnapshot and sync your ZFS either remotely via SSH or on USB with a few simple shell commands vor even use manual zfs snapshot / zfs send.
If something breaks syncing back also works flawlessly.
I personally also use ZFSBootMenu which lets you clone an old snapshot if e.g. the kernel breaks and having a separate dataset for /home lets you keep your documents if required.
I'm not going back to luks/btrfs/ext4 anytime soon...