Whoops. It seems there is a security vulnerability in the T2 security chip. What's worse is it can't be patched. Luckily the attacker would need physical access to the device so it's not an issue for the majority of people.
https://www.forbes.com/sites/ewansp...rity-exploit-mac-macbook-air-macbook-pro/amp/
https://www.forbes.com/sites/ewansp...rity-exploit-mac-macbook-air-macbook-pro/amp/