[mikegerwitz]

> Maybe I'm in the minority but I prefer keeping my GNU/Linux and Windows installations separate, with each OS on its own drive.

Consider full disk encryption on the GNU/Linux drive as well, since Windows can still access the disk.

[mcsofake]

I don't think that will help. After all Windows can patch the bootloader to cache the encryption password too. Even secure boot won't protect you since Microsoft has the signing keys.