[stevewodil]

The question is ambiguous but I interpreted it as if the laptop fails and I need to have it repaired how do I keep my data safe because I can't just pull the hard drive out before sending it for repair.

The T2 chip already encrypts the SSD using a unique identifier generated and known only by that host's T2, so it's sort of a non-issue imo

[rooam-dev]

Thank you for your input, that's exactly what I meant.

[garmaine]

If you use FileVault encryption with a secure password.

[stevewodil]

No, it's encrypted either way. With FileVault enabled it just won't automatically mount and decrypt when connected to the T2 chip

[garmaine]

That doesn’t matter if the password is known, guessable, or nonexistent.