If an attacker has physical access to a device, it should already be considered compromised...