Since this is a tethered exploit, simply rebooting the device should prevent that. They could also install a hardware keylogger, so a non-exploitable T2 doesn'

Since this is a tethered exploit, simply rebooting the device should prevent that. They could also install a hardware keylogger, so a non-exploitable T2 doesn't really help here in the general case. We just have to hope that the TSA aren't at the level of your average state actor.