The best of both worlds is to have a fake system—that is booted automatically, without any password etc. and with installed spyware—alongside your actual OS, en

The best of both worlds is to have a fake system—that is booted automatically, without any password etc. and with installed spyware—alongside your actual OS, encrypted and hidden. You could even just keep data on your disk and have /boot on a pendrive (or a memory card, which seems more practical).