Going diskless is not a complete defense (nothing is), but it still helps against certain attack vectors. Borrowing from Mullvad's blog post on the topic[1]: -

Going diskless is not a complete defense (nothing is), but it still helps against certain attack vectors. Borrowing from Mullvad's blog post on the topic[1]: - If the computer is powered off, moved or confiscated, there is no data to retrieve. - Running the system in RAM does not prevent the possibility of logging. It does however minimise the risk of accidentally storing something that can later be retrieved. https://mullvad.net/en/blog/2022/1/12/diskless-infrastructure-beta-system-transparency-stboot/ https://mullvad.net/en/blog/2022/1/12/diskless-infrastructur...