История изменений

mount the ESP to /boot: 
...
This increases the size requirement for the ESP, as files normally installed in /boot will join the ones used for UEFI booting.
This exposes the kernel and initramfs images to potentially hazardous manipulation from bootable drives or other operating systems when dual-booting.
This makes encrypting /boot impossible, as the boot loader and its files have to be accessible by the firmware.
This makes root volume snapshots (using Btrfs, Bcachefs, ZFS, LVM) less effective as /boot content would not be included. In case of kernel updates, returning to a snapshot with older kernel version would draw the system unbootable and require manually downgrading the kernel using external media.

This increases the size requirement for the ESP, as files normally installed in /boot will join the ones used for UEFI booting.
This exposes the kernel and initramfs images to potentially hazardous manipulation from bootable drives or other operating systems when dual-booting.
This makes encrypting /boot impossible, as the boot loader and its files have to be accessible by the firmware.
This makes root volume snapshots (using Btrfs, Bcachefs, ZFS, LVM) less effective as /boot content would not be included. In case of kernel updates, returning to a snapshot with older kernel version would draw the system unbootable and require manually downgrading the kernel using external media.