To remove disk encryption

I’ve read that you can use the TPM to automatically decrypt the disk on boot. This would provide some protection in the instance of the disk being removed from the system if that is in your threat model at all that may be worth considering in place of no encryption at all.

This is assuming the mini has a TPM which I actually haven’t checked as I’m not currently in the market for the mini.