For example, if you have TPM backed FDE, TPM-backed encryption for your wallet, and the screen locked on login, you can still get a pretty high level of security.
Sure, but they specifically asked for it to unlock on autologin. Meaning no password to be entered. If you lock the screen right away, you still need to put in a password, so that is not what they want.
That really depends on what backs it up.
For example, if you have TPM backed FDE, TPM-backed encryption for your wallet, and the screen locked on login, you can still get a pretty high level of security.
Sure, but they specifically asked for it to unlock on autologin. Meaning no password to be entered. If you lock the screen right away, you still need to put in a password, so that is not what they want.
They asked it to unlock their wallet on autologin, which is separate from whether the screen is locked.
Either way only because of SMB shares that I don’t want to mount via fstab. Where access is with restricted rights. Selinux is also in use.