[lazyjones]

> isn’t there a common understanding that if an attacker gains physical access to your computer, you already lost?

I don‘t think so. It would mean that securing information in the workplace is nearly impossible and colocation hosting security intrusion boils down to picking a physical lock (of your rack).