[jeff_marshall]

Yes it is. Some variants even include a hardware security module so that you can store your encryption keys on it and keep everything but the bootloader encrypted (assuming proper software support of course).