The laptop boots, the key goes into RAM, then the OS asks for a login password. I don't see a simple way to get the encryption key or log in without the passwor

The laptop boots, the key goes into RAM, then the OS asks for a login password. I don't see a simple way to get the encryption key or log in without the password. Unless cold RAM attacks got much easier recently, I don't see where the problem is for an average user. Fingerprints are admittedly not a match against someone willing to collect mine and make a model of them, but I'm not expecting anyone to do this. If I were, I would disable the fingerprint sensor, of course. The point of these features is that they make it very easy to get to a reasonably good level of security. If the only option were an (admittedly more secure) strong passphrase to type at every boot, nobody would use it, which would be much worse.