Just do full disk encryption + autologin. Done