“attacker needs a custom Thunderbolt 3 device and five minutes alone with your Mac. At the end of that, they can copy all your data, even when its internal SSD is encrypted and the Mac is locked.”