a little late to the party, but I also (in addition to 10 minute logouts), encrypt my hard drive, and require google auth for login.
To get in, they need:
1. My desktop to be unlocked
2. My Password for my account
3. My lastpass username and password
4. My cell phone
5. My fingerprint to unlock it
6. to accomplish this all without me knowing
compiling all of this, you can be very safe if you try!