I use encrypted folders on my laptops for sensitive stuff. I auto log into single user mode just for this risk. My ssh server inits on startup, and my webserver mails me whenever my daily crons run with the current IP included.