Good use of full disk encryption (or encryption of everything but the base bootable OS) and separation of systems (bitcoind on a separate server.) That's the way to do things! Good on them.