Actually a proper login screen and encrypt the whole privacy tops would be first choice. I did not have a look yet for anything of the issues as my first look would go for real multi user environment and that would mean to have all things moved to ~/ instead of somewhere else. Long way to walk I guess.