This isn’t possible. Your EFI partition can’t be encrypted no matter which bootloader you choose. The UEFI standard doesn’t support that.
This is correct, after restoring a snapshot, you would need to chroot into the system and do some manual cleanup.