Additionally, it provides zero security against any attack more earnest than peeking at your screen when your back is turned, unless combined with an elaborate

Additionally, it provides zero security against any attack more earnest than peeking at your screen when your back is turned, unless combined with an elaborate chain of trust, including a TPM/Secure Enclave and full-disk encryption, which is only obtainable by running either Windows or Ubuntu with the officially signed-by-Microsoft Secure Boot kernel. Otherwise anyone can just boot the machine off a USB stick and take what they like.