This is a good argument for Full disk encryption with a vpn and dns leak protection. You're right about people using encryption too. They have a whole playbook dedicated to targeting encryption(physical access is page one).