It turns out Windows doesn’t always choose the smartest location.
Locking down individual files is great, but a blanket encryption will prevent anyone from getting their paws on your files.