[kstenerud]

This is a big reason why I don't use full-disk encryption; I simply have no threat model that would warrant the risk of using it.

FDE doesn't protect against remote attacks, and anyone who would physically make off with my devices (a VERY unlikely event) is either:

* A thief who will turn around and sell them to someone who will erase them.

* A state actor who will get the data no matter what I do (and find it of no interest anyway).