Yeah, I’m using a large font in reader mode and I think I had the word encrypted showing without un onscreen.

You are correct, it makes a custom binary in the fat partition that is verified by TPM for unlocking/proceeding, that binary then contains the other parts to move forward.