Based on the Blackwing paper the "Microsoft Surface Type Cover" hack seems pretty legit. They can gain login access to a Surface-with-cover by simply unplugging the cover and plugging in their evil USB device. That sounds like a bypass to me, no horse shit required.