Full-disk encryption is the first line of defense