[parmezan]

Practically all famous Linux distro's offer built in encryption when setting up a new system using luks/dm-crypt. But you don't have to worry about it.

To encrypt a Windows 10 system u can use Veracrypt to boot the whole OS or just a container.

For Windows (Enterprise) you can also use BitLocker by Microsoft although the source code isn't trusted and I believe you have have a more expensive license in order to use it.

Yes you should encrypt your laptop. It's worth it in case you lose a laptop or it gets stolen nobody can read the data.

[cantrevealname]

> BitLocker by Microsoft although...

A further reason to avoid BitLocker is that it is incredibly easy to give Microsoft the decryption keys to your data if you're not extremely careful. I think the default setting was (and still is?) that Microsoft gets the ability to decrypt your data. I don't understand why anyone would think that is desirable.