@sheogorath But will Grub password protect from evil maid attacks such as this one? https://github.com/nyxxxie/de-LUKS

Because the main problem is that in Ubuntu the bootloader is loaded from an unencrypted partition, which can be modified off-line...