I had this enabled as it protects against RAMbleed/ECC errors, so it's not limited to physical attacks.