Caveats

• Encryption speed and CPU usage (aes-586)

• disk corruption causes much harsher damage

• even a simple bit flip can cause widespread damage

• encrypting your root partition is tricky

• It would be nice if LUKS cryptsetup allowed for more than 8 keys to allow for an almost arbitrary amount of user passwords to unlock the data partition on a given machine