> If your device has full disk encryption using a strong password, physical access doesn't get you much in the way of accessing the data.
Well, even if assuming that all your software is bug free, someone with physical access can either replace the unencrypted boot image with a compromised one which gives him remote access or install a hardware keylogger and come back later for the disk and password.
In the hypothetical situation of a targeted attack and attacker with physical access, FDE only protects you if you never turn on your computer.