The best of both worlds is to have a fake system—that is booted automatically, without any password etc. and with installed spyware—alongside your actual OS, encrypted and hidden.

You could even just keep data on your disk and have /boot on a pendrive (or a memory card, which seems more practical).