“doesn’t seem possible to get a Mac with a T2 chip to start up from an unencrypted internal drive”