I used to run this until I couldn't ignore that it was pointless because it offloads the attack vector to something I can easily lose, have taken or replaced.

Or someone could come in an pop in a drive with their own kernel.

Nevermind the reality that I'd never completely follow through with the security measures needed on a personal machine. I'd just be giving myself an active role in my home's security theater.

I just encrypt my home folder and don't trust machines/networks for important things.