You shouldn't assume that someone with the disk password is entitled to the user's data. That's kinda a fundamental separation. Your home directory should be encrypted separately from the disk anyway