> If you're choosing "reboot" rather than "shut down", presumably you intend to continue using the machine, so it's reasonably safe to keep credentials around.

This is the last thing I would expect. Quite the contrary, when I reboot (rather than log out or sleep), I expect the machine to clear it's memory completely.