Linux has always taken the open and honest position that it’s fundamentally impossible to secure a machine against an attacker that has physical access to it. That’s not to say that the community doesn’t work to make in-person owning harder, but it’s widely acknowledged that physical security is essentially impossible.