I prefer to either LUKS-encrypt the volumes used by ZFS, or use ecryptfs at the user level. ZFS ‘encryption’ has some nasty gotchas, such as not encrypting snapshot names (which just boggles the mind …).

I add ~/tmp (cleaned out on every boot), and use ~/.config/user-dirs.dirs to assign good lowercase names to everything.

And of course all code lives in ~/src.