-
this setup is mainly intended for laptops.
-
it has full-disk-encryption, so your data is safe from anyone stealing the laptop.
-
it also does not require entering the encryption passphrase (that should always be long since offline brute-forcing can't be throttled also making it nessecarily unwieldy), but surprisingly that makes it more secure as it allows resisting the more practical forms of an evil maid attack.