My personal observations

Don't use a bad password, always combine it with gpg, always use multi-key setups.

Always encrypt your swap (!)

loop-aes is pretty fast on x86 CPUs

Don't forget gdm/xdm/kde combined with xscreensaver (and setup to auto-lock the screen)

Run a tightly administered firewall

Don't run any services that aren't needed