If you open your computer's case, it is already vulnerable to hacking, because no consumer x86 computer is secure under that threat model. Yes, this is another bullshit hyped attack with minimal practical consequence because under their threat model you are already pwned.https://twitter.com/WIRED/status/1259669698494509056 …
Also, I'm pretty sure resume from S3 suspend goes through the BIOS flash chip like a cold boot, so instead of all these Thunderbolt shenanigans you could just flash the BIOS to take over the resume process and do whatever you want, like dump all the keys.