The login password can be cleared and reset with very little difficulty if one knows what they're doing. If you enable FileVault it will dramatically increase the difficulty because not only does it encrypt your user account, the password can only be reset if you know the master password that is set. The trade-off is that if YOU ever forget it...well, just don't forget it... 🙂