@jonschwenn I think your concern is valid only when the attacker does not have a physical access to your Mac.