Bruteforce of such random password is just not plausible and talks about KDF "weakness" is just a distraction. I think most likely it was evil maid attack. Her

Bruteforce of such random password is just not plausible and talks about KDF "weakness" is just a distraction. I think most likely it was evil maid attack. Here are projects which try to mitigate some of evil maid attack risks: https://github.com/noahbliss/mortar https://github.com/noahbliss/mortar https://safeboot.dev/ https://safeboot.dev/