If you cannot have fully encrypted setup, then you can consider encrypting at least most of data. At work due to remote work I cannot have fully encrypted disc

If you cannot have fully encrypted setup, then you can consider encrypting at least most of data. At work due to remote work I cannot have fully encrypted disc with Windows as I have to reboot remotely. So I left a small enough partition for Windows, then created another partition for my data that I encrypted with strong password in Bitlocker. Then I symlinked my user directory from C:\Users\UserName to a directory on D: and created an extra account that I use after reboot to unlock the encrypted disc with my data. This is not ideal, as Windows still may store my data on C:\, but if one disables virtual memory, it is a reasonably secure setup.