Lithium fires are hard to contain unlike petrol fire:

https://www.yahoo.com/news/articles/firefighters-forced-submerge-electric-car-082852772.html

I believe the issue is because both VeraCrypt and Wireguard use kernal level drivers which can’t run without signing, though they can be bypassed but that isn’t good for security.

https://learn.microsoft.com/en-us/windows-hardware/drivers/install/windows-driver-signing-tutorial