That means shit, if someone can compromise your bootloader in an hotel or some other public place then they’ll get to your data either way once you turn on the phone.

I never really understood how this kind of attack happens. Can it simply be done in any phone? What are the required conditions?