I recently upgraded my 2013 MBP to High Sierra. This changed my unencrypted file system to encrypted APFS.
Does Apple provide any information about how APFS encryption works? Does the account password protect the private key? Then how can there be a guest user? When my account password was weak, does changing it improve encryption security?
What is the encryption method and strength?
I'm used to Windows BitLocker, where the encrypted partition is either locked or unlocked, and the Windows account password is different from the BitLocker passwort protecting the private key. The encryption method and strength can be set via Windows group policies.