Ultimately I think the main danger is a skilled attacker targeting the system. That said I would like to secure data from a local attacker as well. Ultimately I

Ultimately I think the main danger is a skilled attacker targeting the system. That said I would like to secure data from a local attacker as well. Ultimately I understand that it will be difficult to secure fully against someone with hardware access but any risk mitigation practices I could use?