I suppose it's possible to imagine replacing grub with something that captures your password. It depends what your threat model is. I think you'd need physical

I suppose it's possible to imagine replacing grub with something that captures your password. It depends what your threat model is. I think you'd need physical access, at least.