Separation is still recommended.

Storage encryption can be attacked differently than a running system.