> I guess there are valid reasons why Apple don't ship new Macs with FileVault enabled from the factory. Should we assume that when it could also be likely the

> I guess there are valid reasons why Apple don't ship new Macs with FileVault enabled from the factory. Should we assume that when it could also be likely there's no good reason? Especially given common practices like this - which I also experienced when I had my entire 2016 MBP in for a battery (and therefore full topcase) replacement: https://www.troyhunt.com/apples-desensitisation-of-the-human-race-to-fundamental-security-practices/ https://www.troyhunt.com/apples-desensitisation-of-the-human... (In own my case, after questioning, I gave them a non-admin test account after I modified ~/ permissions away from 744 - yet, it was I who felt like the crazy one for not simply handing over all my active browser/email login sessions. Imagine what a great attack vector that would be for most Apple customers.)