The alternative is to set a PIN on the TPM. It will not unlock without it and go into lockout after a few attempts.

Some people consider it more convenient to just boot the thing, take the protection against casual loss of confidentiality and accept the risk they might face from determined attackers.