Best i can tell, it comes from the -sec community. This because a encrypted HDD in a laptop is at its safest when the laptop is turned fully off. At that point you have no keys in RAM or anything like that. Thus when you do not use your computer you turn it off, you do not sleep, you do not hibernate, you turn it off.<p>The systemd devs have a thing about listening to the -sec community. You can see this in how while the Linux default is to treat namespace mounts at private, systemd mount them as shared unless told otherwise. This because the -sec people recommend it that way (allows a sysadmin to override mounts from outside the namespace, to avoid dos-ing apparently).<p>Then again they also have a bit of theater in them. For example they accepted a patch to lock the computer if a HID devices was plugged in. But while the original patch did it on any device, they modified it so that it only happens on the device ids of known mouse wigglers used in police computer seizure kits.