To my understanding (haven't yet read the paper, just the abstract) - most full-disk encryption schemes are implemented in OS as opposed to in-hardware, so if t

To my understanding (haven't yet read the paper, just the abstract) - most full-disk encryption schemes are implemented in OS as opposed to in-hardware, so if the attacker has deep access to the system they could probably find a way to write unencrypted data to disk? That may not work inside a VM though