Needing a PIN or password to boot is a tradeoff. If it's warranted by your threat model you take that tradeoff. (Personally I'd love to see the encryption and

Needing a PIN or password to boot is a tradeoff. If it's warranted by your threat model you take that tradeoff. (Personally I'd love to see the encryption and key storage module being a physically separable device that I could carry with me. Something like an HSM with I/O bandwidth sufficient to perform the bulk encryption on the device itself.)