[Wowfunhappy]

I don't disagree with other parts of your post, but I still think protecting against the scenario where an attacker has physical access to your computer is basically pointless. Especially if it comes with a very significant loss of freedom.

If a malicious person has entered your home or workplace, access to your computer should be low on the list of worries.

[derefr]

Not every system is inside a home or workplace.

ATMs. Parking meters. Building security/intercom systems. Digital billboards and transit information signage.

These are the IoT devices that need to be hardened against physical access.

[baroffoos]

Android handles this decently well it allows you to install whatever you want to the device but to unlock the device for custom firmware the device is first wiped so user data is perfectly safe.