If we have a container that is tamper evident then they can't do all those computer modifications you mentioned without we finding out the computer has been tampered with.
Or do you mean to do everything on my computer without having access to any hardware/firmware? You would just simply boot up the computer and somehow hack it? How?