Yeah love those threat models where physical access is a topic but basic MFA measures are not even done.
This is like comparing yourself to Fort Knox while not even locking your door.
Physical access is not a problem when basic other measures are not taken. If physical access is your largest threat then you already safer than 90% of companies imo.
>Physical access is not a problem when basic other measures are not taken.
Why? In my home I have a Synology NAS server, not connected to the internet, where I store unencrypted data. It's not secure out of the box, and I didn't attempt to harden it.
Physical access is not a problem when basic other measures are not taken. If physical access is your largest threat then you already safer than 90% of companies imo.