Crouching T2, Hidden Danger
So to summarise:<p>- Requires physical device access.<p>- Cannot decrypt FileVault without you entering decryption key post-exploitation.<p>- Cannot access secrets in the Secure Enclave.<p>This isn't great, but it's not really a huge security issue? The main attack vector here is stolen Macs being re-sold as they can be "un-bricked".<p>I know part of the point of the T2 is to make physical access less interesting an attack vector, but it's typically doing so after a machine has been stolen. This makes it more attractive to do without stealing, but that's an attack style that is only really done by state level threats, and one that was still possible anyway, because hardware access is essentially game-over anyway at that point.<p>I feel like this is over-blown? Am I missing something? Is there another attack vector here that's worse for "regular users"?