PSA: if you're in infosec red teaming an evil maid attack and you are not wearing a maid outfit while doing so, you may not be in full compliance with security standards and best practices
do remember that some industry regulators additionally require testing with cat ears for full certification. some organisations opt to further demonstrate protection against against the ‘moe moe kyun~’ blessing of a machine to auditors, but this is not currently mandatory under any scheme