8v55 If the device has time to auto-reboot after it's taken, it protects against exploiting it or extracting data from the SoC, memory, etc. in general. Exploiting the device before then is possible but very difficult. It's very impractical to either extract the memory while preserving content or to connect to it while it's in use. From what we know, that's not currently being used as an attack vector in practice but we expect it to become one. Auto-reboot is a strong protection against it since the time to get it to a specialized lab for this is very limited. We lowered the default to 18 hours from 72 hours partly due to threats like this.
Upstate1618 The general purpose RAM is not fully encrypted yet but the way it's designed does make this quite hard. It's very likely to be added as a future improvement to the SoC memory controller.