Is my assumtion right that you should take the encrypted file to an offline device (e.g. Tails) to encrypt it there and use the seed from there? I would not encrypt the seed on a device connected to the internet.