Presumably they’re capable of buying a $5 wrench to physically use against you.
Or just plugging a device into your laptop while you’re not looking and stealing all your session state for browsers.