Whole disk encryption should really be standard. No point deleting data if it's encrypted. At that point it's more clear-cut in becoming whether you surrender a key or not, no gray zones.