Re: "with the chance to enable disk encryption"
I think that just means that security policies, including disk encryption, can be turned on automatically when the machine reboots after setup. Otherwise, you would have to do another thing to set it up either manually or with another reboot.