XORing a nonce with a ciphertext vs XORing a nonce with plain text and then encrypt
option 2 is insecure. Recall the nonce is public and must be sent with the ciphertext, which means it can be removed from the ciphertext trivially and therefor has no effect at all.
You are effectively doing ECB with some useless extra step and extra communication.