A drive wipe might take too long though, especially if they grab the laptop and shut if off. After a simple shutdown or lock, disk encryption really is the primary protection here.