Any time someone has physical access to a computer, they can get in,
regardless of the OS.

The key is to keep the computer out of the hands of bad guys.

If there is a concern that the computer may fall into the wrong hands,
then you should encrypt the filesystems which contain valuable or
sensitive data e.g. /home, and also make backups.