>>608422
yeah, you need to decrypt the drive very lately, when everything is booted, which might break a lot of things
diskcryptor had that option though, it could erase key from RAM on sleep, but not sure how well it worked
also, veracrypt (and luks too) apparently doesn't support U2F, so you're basically limited to static password
is it really a threat since trojan can stole your files directly instead of stealing a static password? it's not like you use it for anything else than files
probably it's dangerous if you lost it in some moment in past though