Indeed! Which is why I said "software full disk encryption" in my OP. :)