You can make an authentication method strong enough on the VPS, multiple factors, even IP block lists so they'd have to do it from your home. Secondly, you're

You can make an authentication method strong enough on the VPS, multiple factors, even IP block lists so they'd have to do it from your home. Secondly, you're local machine should encrypt itself if that's your threat model. They can take it while it's still on but if that's actually a concern for you, you can figure out a way to trigger a lock or a shutdown if things change. If it's a stationary machine, it can be easy to notice your environment changing. maybe you can't find the mac addresses of your switch any more, maybe all 10 of your neighbor's ssid info is no longer visible. Perhaps lack of internet is good enough. Phones are a lot harder because their environment changes a lot more, but you can still check things like has my computer decided to go to lock itself? In the end, if your threat model involves that kind of risk, you can set your devices up to brick themselves or at least shutdown and encrypt themselves. Last, you'd probably want a device so that you can do the things. A phone and or old laptop with an OS already installed that you can retrieve.