Is there anything more secure than a password protected SparseImage against state actors?
Encrypted disk images are secure. The issue that you referenced is a user interface bug in Disk Utility, not a problem with the encryption. You can also create disk images without using Disk Utility, e.g. using hdiutil on the command-line or a utility such as DropDMG.