A nice threat model for determining level of security required
https://ssd.eff.org/en/module/introduction-threat-modeling
- What do you want to protect?
- Who do you want to protect it from?
- How likely is it that you will need to protect it?
- How bad are the consequences if you fail?
- How much trouble are you willing to go through in order to try to prevent those?
And here’s the extreme version of laptop security
https://firstlook.org/theintercept/2015/04/27/encrypting-laptop-like-mean/