This isn't really an issue anymore. All M series Macs (and T2?) are always encrypted by default.