“Some person with physical access to the computer” absolutely is part of the threat model.
replySome person, yes. The owner, no.
replyThe standard way you distinguish "adversary with physical possession" from "owner" is "do they have the owner's passphrase".
replydeleted
reply