Issue with X230 on boot, possible compromise?

Hi, regarding the checksum mismatch, check if this bug for heads 1.3.1 applies to your machine (probably).
Regarding the default entry: don’t add the disk encryption to the TPM (you can see this noted later in the instructions you linked in the post.). This was the reason you got prompted to select a LVM-device, which is in fact pre-configured in the boot entry and will prompt you for the disk encryption passphrase.