Anything that uses ZFS gets it by default, as well as most configurations of Btrfs. Not secured by a TPM key (unless you go to great lengths), but for accidents it's plenty.