3 ms·

Separation is still recommended. Storage encryption can be attacked differently than a running system.