Thanks everyone for your responses!

I agree with the virtual partition instead of whole-disk. It is my
understanding that in the virtual partition, the files will remain
encrypted until you open them, thus also protecting them from the
network. Whole-disk will decrypt everything after you ente...

[ more ]