Linux kernel boots, runs MacOS in a VM, can snoop its memory, evil maid attack. This is one of the few ways that locked bootloaders benefit smartphone users (rather than benefiting only the smartphone manufacturers).
This is also why ARM Chromebooks in "developer mode" display a scary message for several seconds on bootup and make a maximum-volume-level beep to get your attention. To disable that you have to replace the bootloader, which requires opening up the case (and if you're going to do that you could have just swapped the motherboard).
https://en.wikipedia.org/wiki/Blue_Pill_(software)
Linux kernel boots, runs MacOS in a VM, can snoop its memory, evil maid attack. This is one of the few ways that locked bootloaders benefit smartphone users (rather than benefiting only the smartphone manufacturers).
This is also why ARM Chromebooks in "developer mode" display a scary message for several seconds on bootup and make a maximum-volume-level beep to get your attention. To disable that you have to replace the bootloader, which requires opening up the case (and if you're going to do that you could have just swapped the motherboard).