Yeah, this line I thought was hilarious because most Windows machines don't have an encrypted disk by default. (It makes data recovery and repair work harder for users who largely don't care about security.)

Even with the Manjaro installations you can use systemd-homed to store your home dir in a luks encrypted container.

Cue the systemd bashing, it works for me.

I'd be willing to bet most people including devs don't bother to encrypt their laptops storage.

If someone gets their hands on it, they can install a keylogger, and then they know the password for the encrypted part...

I think this is not the scenario the parent poster refers to (that is, "three letters agency attack").

The typical scenario is: dev brings the laptop out of home -> laptop is stolen. In this case, encryption at rest spares the owner's sensitive information.

Actually, I personally consider any machine at risk even if at home, as burglary is not to so far fetched to be considered unlikely.

TBF, this is still possible if the boot partition is unencrypted (which is the only way I've ever seen FDE done on Linux in practice).

I don’t actually think that’s true for my MacBook.