DoctorFreeman

Haha, but I can still see from your statement that even though they are unwilling to follow good practices, they should in principle.

For a laptop with full disk encryption, there is the possibility of the attacker tampering with the hardware.

I don't know if it will cause problems. I'm just playing it safe :)

That is honestly a fantastic idea. Many thanks for it. And I don't see any problems to fit it into the design right now.

Thanks for the note. Maybe I can rename it to Tripwire AEM where AEM stands for anti evil maid.

Thanks for the feedback. My guess is that the part about destroying the random secrets is easier to understand, but the later part about a key pair and how its signing of the photo log can help with a persistent network outage is harder to understand? It does need a specific mental picture to see how it makes sense. I'll try to have more diagrams to explain.

But yeah the "random mosaic" with rice and beans is a great defense. My view is that these together can form a defense in-depth.