It would still be possible to copy the hard drive at a lower level before password entry. You could then compare before and after password entry and see that large chunks of data have been modified.
Doesn't have to be large chunks, just one block that stored the encryption key for the other partition. All you have to do is scrub the key from the drive and it's effectively erased.