To protect your computer against Arch users, remember to enable TPM2-bound LUKS encryption with systemd. A big thanks to the orange butthole and its human minions for this monumental contribution. Oh, and don't set a recovery password or key escrow, those introduce a backdoor that could let the Arch users back inside.