It's probably worth mentioning that someone who steals a FileVault-enabled Mac can never shut down or restart the machine without losing access to the booted machine's startup drive. While reading Macworld's Complete guide to FileVault 2 in Lion, I encountered an unexpected caveat (emphasis mine):
I've been researching FileVault 2 to make sure that I understand it before I enable it on my Mac.
