Is there not a presumption that with physical access to a machine it can be rooted if you try hard enough? I certainly make that presumption.

The number of Macs I've unlocked by creating a new admin by removing the "install is finished" file in single user mode is in the teens.