I was considering buying a mini Mac, but there wasn't a way to encrypt it fully with Veracrypt and in the case of Francis Rawls the feds got pass Apples vault encryption. With the recent iPhone notification storage revelation I don't trust Apple at all.
iirc this was a register level exploit. no software in iOS or macOS touched the undisclosed register, but when the right secret key was entered, you got full read/write primitives on the silicon
