I just found out that in the past few months there has been work happening in @gnome to allow for encrypting user home directories using #systemd homed : thisweek.gnome.org/posts/2024/…

It appears as though this would put each home directory inside its own LUKS container that would be locked when the user logs out or the hardware suspends. This would be a major improvement to the security profile of #Linux on the desktop!

Currently, on most systems (including Linux) regular user data is only effectively protected by system encryption when the hardware is completely turned off, but not when it is suspended.