So full-disk encryption on a Linux laptop is basically bullshit, isn’t it?

*gasps from the audience* *angry shouting*

Lock your computer: unencrypted
Sleep: unencrypted
Suspend: unencrypted

Hand your locked/sleeping/suspended computer to a customs agent or leave it unattended at a cafe: it’s unencrypted.

And we call this secure.

So I guess that’s the first thing to fix before we can recommend these devices to everyday people instead of Macs (see FileVault for a proper implementation).