in certain cases yes, but ignoring the potential benefits and technical pitfalls the average user exposes themselves to by avoiding a hw signing implementation without real concideration is sub optimal advice in general. You dont need to buy anything if you have the knowledge to create a encrypted airgapped environment that only loads in ram in a safe way. But you cannot realistically recommend that to someone who has never interfaced with their home directory in a terminal, and even then its a big ask…