Based on what the T2 chip, on user log in, decrypts a SSD with FileVault enabled? Bypassing the user password will result in a possible decryption of the SSD? As several years ago there where tools that bypassed the user password.
Around the web I have found:
Turn on FileVault, however, and a T2-equipped Mac engages in the same boot behavior as one that handles disk encryption in software. Instead of loading macOS directly, the Recovery partition boots in a special mode that requires entry of the password of any account allowed to use FileVault. Until that password is entered, the disk’s contents remain encrypted just as if it were at rest.
From this we can understand that logging into your mac user - an user that is approved by the T2 to unlock the drive on which FileVault is enabled - is enough to decrypt the drive. From this the question, bypassing the user password using some sort of tool will decrypt the drive?
I am curious because prior to the T2, depending on your configuration you could end with two password requests at log in:
- One for the user
- One to decrypt the drive
That seemed a much stronger and secure approach.