The windows password is more of a "Please don't use my area and ruin my browsing history" than an actual security option, I thought that was well known? Full disk encryption is really the only way if you want to keep people out of your stuff!