NixOS can be a real pain when it comes to pre boot encryption and secure boot. If you’re intending on going deep into hardware security I’d avoid it.