It is and it isn’t. There are some steps, and if uou don’t already know what you’re doing, it isn’t aleays clear that the documentation is clear (i.e. it can be difficult to know where to look.
I should probably post this somewhere not buried in a thread. It’s long, but only because it’s keystroke by keystroke in detail AND centered on fully encrypting everything except the EFS. You can also install the zbm package (rather than just manually grabbing as I did here).
It’s roughly in “relatively easy once you know how to do it” territory. Not scary, but not just plug and play either.