You're right, it didn't even occur to me to check this. On the status page it says
No cryptsetup support found for partition type "crypt_LUKS" in "sdb1"
No cryptsetup support found for partition type "crypt_LUKS" in "sdc1"
Unable to automatically fix dm-1, mounting Read Only: fsck 1.41.14 (22-Dec-2010)
fsck.ext4: Device or resource busy while trying to open /dev/dm-1
Filesystem mounted or opened exclusively by another program?
I encrypted the drives originally using another Linux computer, not through Alt-F web UI.
I don't decrypt the drives on DNS-323 startup, I have a trivially simple script that I run manually that provides the encryption password on the command line.
Both drives are decrypted with my manual commands, and Alt-F then automatically mounts them, but only the one in /dev/dm-1 is mounted as 'ro' instead of 'rw'.
Not sure why the error thinks device or resource is busy, as I only ever try to decrypt the drives after the DNS-323 has rebooted, so everything should be starting from a clean slate.