I need an encrypted / without encrypting /boot

You mean like YubiKey?

I’ve seen this on AUR, I don’t have any info on it though. I don’t know if that helps at all.

The maintainer of GNOME ISO Profile has to fix it.