Todfloyd My question is, does the USB also provide data transfer if the device is off? I have read online that data transfer is still allowed if the device is off.
If the device is off, what data is there to transfer? Profiles are not logged in, so all data is encrypted. So, your data would be safe. The OS should be safe as well because of verified boot.
The first one would be the most secure since most things are off/disabled.