I've come to find Full Disk Encryption to be a rather unsafe method of securing data as standardized tools are becoming available to just read out the encryption key from RAM, where the system needs it to be to make use of the system partition.
The more secure approach I suggest is to have a separate data partition with user data with a separate encryption used as a cold storage and only mounted when files on it is used.
Preferably, the system partition should be secured as well. My best idea for doing this is scripting a time delayed purging of keys from RAM, or shutdown, if the script has not received a timer reset. The timer reset could be anything, like a successful logon within 24 hours for a laptop. I'm guessing that one would normally logon to a personal laptop within 24 hours, but if lost in any way, it will not be in the hands of experts that read out RAM within that time.
Let me know what you think of this?