If the encryption is correctly configured then that doesn’t matter. The only vulnerability that matters is in the encryption algorithm and that’s very difficult to brute force or get a vulnerability for. Though at some point you’re dealing with rubber hose cryptography where you have do deal with not knowing the password yourself.
Until they find a CVE they can use sure
Plenty of those in motherboards, TPMs, CPUs, software, OS, etc.
If the encryption is correctly configured then that doesn’t matter. The only vulnerability that matters is in the encryption algorithm and that’s very difficult to brute force or get a vulnerability for. Though at some point you’re dealing with rubber hose cryptography where you have do deal with not knowing the password yourself.