“attacker needs a custom Thunderbolt 3 device and five minutes alone with your Mac. At the end of that, they can copy all your data, even when its internal SSD is encrypted and the Mac is locked.” Posted on June 26, 2022 by jgordon Link. Always assume your data can be read.