I think about a scenario where a local attacker try to steal my Data.
At first, we all know that a local attacker can allways steal my data from a debian pc system.
He can boot and steal my data.
If I have a boot password, he can go over grub and steal my data.
If I have a boot and a grub password, he can boot from dvd/usb or he can put the hdd in another pc, to search for the data.
But what about a Whonix VM Image?
If I have a boot password and also a grub password, it is not possible to boot the OS.
But also I think it is not possible to boot from dvd/usb and of course he can not take out the virtual hdd!
So does that mean it is not possible to get out data from this image?
If I am wrong, please explain me the workarount how this is possible, because I do not see any way.