It's a macbook air so technically they can't do that as the hard drive is embedded to the motherboard, right?

Also, all data are/were encrypted using Bitlocker (average strength password) - forgot to mention the mac was running on Windows 10, work computer.