Your Thunderbolt port can be used to steal data from a locked PC — here's the setting that stops it

One System Information field shows if Kernel DMA Protection works.