Fairly sure that if the correct GPOs are set, there is no need for any shell commands needed for a TPM PIN enrollment.

Windows and macOS both can do FDE with good UI/UX compared to Linux.

This is 100% correct, my comment was referring to non-domain joined PCs with no policies set.