An option for full password on every cold boot with pin for subsequent unlocks would strengthen security without removing user freedom.