-------- Original Message --------

>> That depends on what value you place on things.
>>
>> There are plenty of 'personal to your setup' configuration files in the OS.
>> Network connections, wifi passwords, certificates. /etc/shadow can be brute
>> forced to reveal system passwords that you may use again or elsewhere, etc.
>>
>> An OS binary (or anything in /boot including grub) can be compromised to allow
>> access to your encrypted /home after you have logged in and unlocked it.
>     You are absolutely right. There are, at least wpa_supplicant.conf and
> shadow. In wpa_supplicant.conf, the keys are not even encrypted.

This is true but I would put it as what are you trying to defend against. If you
just want your data to be unreadable when stolen then encrypting home works and
is unbreakable for the foreseeable future even against quantum computers for a
long time or even forever. If you want to prevent tampering (evil maid attacks)
then you can raise the bar by encrypting all and using secure boot and disabling
hibernate on Linux (I believe as the filesystem encryption isn't authenticated
and the details haven't been worked on) but Linux and firmware isn't really
capable of it today in general anyway but it does pose a challenge to any
attacker and will make tampering a lot harder.