Well, both Chromebooks and Cloudready devices are encrypted, though the quality does not match LUKS, probably.
Implementing Filevault is easy enough to ask MAC users, LUKS or Veracrypt or other good encryption can be asked from most Linux users. Sounds to me that the Windows users are the main problem. Offering help, having policies and asking them to click on "I agree that I have encryppted this environment" etc. may raise concerns about whether the users actually do: but it could be enough.
Synchronization would reduce the (sometimes enormous) amounts of information being copied by users that have poor connections and want to work at home.