Yes, the "Managing encryption keys" section was the most interesting part. I was wondering how they were going to protect the disk encryption key.

I'm not positive that a pure memory based key strengthening is all the useful though. Depends on how much time they think is too much to login, but considering the class of machine, I'd be worried if they aimed lower than one second.