Work for a software house with a bring-your-own-device policy. Just finished setting up Arch with full disk encryption, swap encryption, custom-signed efi bootloader and kernel, password-protected UEFI setup, custom grub build with LUKS2 support to allow ramdisk to remain encrypted too. Got a keyfile in the ramdisk and an initial auto-login with greetd to prevent having to type multiple passwords. Still need a password on subsequent logins and on my lock screen, obviously. And lastly, Hyprland!