Rarely does one shutdown a laptop anymore. Usually people just close the lid and the computer is put to sleep. In sleep state the contents of RAM is preserved AFAIK and should give the attacker more time to think their plan through.
What you say is the right policy to maximize security, but PGP WDE doesn't enforce it.