Hi I recently bought a new laptop (a Lenovo X1 Yoga 4th Gen) and fitted a Samsung 980 Pro NVME drive. After a bit of a fight I managed to get Windows 11 installed with hardware based encryption. I know that there are some potential security flaws with hardware encryption (due to firmware vulnerabilities in the drives themselves), but I think that it's good enough for most of my needs. However I do have some more sensitive things, so I thought that the best option is to have a Veracrypt partition...