TPM+PIN is pretty great, is a shame it's nearly never used.