Autologin, passwordless login and controlling who can reboot and shutdown your comput

[News]

Autologin and passwordless login play a critical role in the physical security posture of your computer. In KDE, they are very easy to configure. But being easy to configure does not mean that you should. Why? From a security perspective, passwordless login falls in the same category as autologin. It is, therefore, not recommended to enable it for an account with management privileges.

More...

[carbon333]

In theory, yes. But on a desktop computer there's nothing wrong with passwordless login. An attacker could easily get root by grub anyway. Or by his own system on live-cd.

The best solution to be safe AND lazy is to encrypt your whole hard disk. Then you can use autologin without worrying.