There is no such thing as “security” if someone has physical access to the device.

We’ve gotten a lot closer. With fTPM, FDE, boot verification, etc. it’s become a lot more secure than it used to be.