> So ext4 encryption can protect a lost or stolen device, but protecting a device that has been covertly modified is beyond its threat model.

Yeah, this is beyond worrying. If someone edits my disk and I mount it, I want a BIG RED WARNING thanks.