I've seen several articles on HN in the past year that detail serious compromises that are possible via just plugging in a Thunderbolt cable.