@mh well this is an eye opener. didn't know it was easily done without these measures. so first, i think secure boot is enabled but i think i saw the option in the bios so that should be hard to engage. as for encryption, i doubt it :S both drives are the stock win 10 that comes with each machine. is it possible to add an encryption layer on them after the fact?
i'd say, at current, i'm a sitting duck with my current set up given your explanation. asus mobo so i dont' imagine too much security