@feld If there is physical access, but access time is limited, then a competent attacker will place a listening/recording device close enough and promptly leave, wait for you to enter any password(s), with the listening device capturing them and then they'll come back later and simply unlock the device with the password.