Full Disk Encryption Schemes - Pros and Cons

I'm looking to use FDE on my Fedora system drive, most likely with btrfs but otherwise ext4.

Which of these schemes would be most secure?:

1. separate unencrypted /boot on USB thumb drive and fully encrypted NVME OS drive. yubi-key as 2nd factor to decrypt drive. luks headers backed up on other drives.
2. fully encrypted NVME OS drive, including /boot. luks headers backed up on other drives. apparently can't use yubi-key for 2nd factor to decrypt drive if /boot …

cons disk encryption encryption full disk encryption privacy