There are several commercial whole-disk encryption programs that operate at a very low level and do not interfere with application operation.
One significant benefit is that if the machine is powered down, you cannot access the disk without the password. They can be stolen or lost, but they cannot be breached.
I am purposely not bringing up the NSA again since one of our regulars is still in Moscow.
