About cryptsetup defaults, I can tell you that other distributions named have left cryptsetup to its own defaults (aes-xts-plain64 with 256-bit key effective 128 bits for LUKS) and configured only their installers to specify 512 bits for system encryption. I don't know the rationale.