we can get better compartmentalization than that with things like user namespaces (firejail[1]) or spawning a temporary user id[2]

[1] https://l3net.wordpress.com/projects/firejail/ [2] https://github.com/teran-mckinney/raru

But that means they have to steal the laptop in the two minute window before it goes to sleep.

It's not like your user password is 1234, right?

When I got my last computer, I just copied my home directory over. Funnily enough, my old login sessions worked.