I would go with the regular hard disk option and full-disk encryption with VeraCrypt.