Encryption at rest. So, if a hard disk (including a turned-off laptop) is stolen, mishandled, or not destroyed properly.

Someone physically attacking a running computer is a different, and much harder, threat model.

This is why companies employing fde will also require laptops to be shutdown before being moved.