[phlux]

So, assuming the DOJ can force one to decrypt a laptop, then wouldnt it be wise to make all your sensitive informarmation in a cloud-mounted encrypted partition such that nothing actually lives on the laptop of value?

Think of the laptop, again, as a dumb terminal. Make sure that the mounting of said partition is an always manual event and no command logging/local logging occurs.

Here! take the laptop! Here's the password!

When working, data gets brought to a local, ram based, cache - all evidence of anything running on the machine dies with power loss.