You'd need physical access while it is running as the target is using it.

When the threat model is physical security, henchmen are also a consideration.

Yeah if you’re worried about someone getting physical access to your PC for information you should probably be more worried about someone beating that information out of you first.