Yep. Very first thing I do when setting up a work machine is enable full-disk encryption, both to protect company assets from theft, and protect any sensitive material from prying coworkers&#x2F;management.