I don't disagree with other parts of your post, but I still think protecting against the scenario where an attacker has physical access to your computer is basically pointless. Especially if it comes with a very significant loss of freedom.

If a malicious person has entered your home or workplace, access to your computer should be low on the list of worries.