@nazokiyoubinbou Full disk encryption with e.g. LUKS also is a good first line of defense.