https://support.apple.com/en-ca/HT208344 says "You should also turn on FileVault for additional security, because without(!) FileVault enabled, your encrypted SSDs automatically mount and decrypt when connected to your Mac." It should be With FileVault or Without?
MacBook
Macs with a T2 chip always encrypt the drive. If you do not turn on FileVault, the decryption key is stored in the T2 chip and it decrypts the drive when you start up.
If you enable FileVault, the drive will only be decrypted by you entering a password. So, the article is correct.
Macs with a T2 chip always encrypt the drive. If you do not turn on FileVault, the decryption key is stored in the T2 chip and it decrypts the drive when you start up.
If you enable FileVault, the drive will only be decrypted by you entering a password. So, the article is correct.
FileVault with T2 Chip
