I think this is not the scenario the parent poster refers to (that is, "three letters agency attack"). The typical scenario is: dev brings the laptop out of ho

I think this is not the scenario the parent poster refers to (that is, "three letters agency attack"). The typical scenario is: dev brings the laptop out of home -> laptop is stolen. In this case, encryption at rest spares the owner's sensitive information. Actually, I personally consider any machine at risk even if at home, as burglary is not to so far fetched to be considered unlikely.