Indeed, however it should be noted that this is only a single attempt attack and which will trigger the tamper protection.

Changing the boot order, making changes to the BIOS or booting from an unsigned bootloader would trigger a bitlocker lockout.

This means that if you don’t get the keys on the first attempt you can’t just pass the machine back to the user and try again later since the next time it will boot it would boot into bitlocker recovery.

And even if the attack is successful the user will still be aware that something did happen so you are still better off with other physical attacks if they are still possible.