Any reason you need to encrypt the host OS information? I would assume anything interesting would be in the VM and you could probably have the VM encrypt it’s own storage.

Part of me is bothered by those explanations, but if I had to explain GitHub to a tech illiterate grandparent with that much screen space I don’t know if I would do much better.