Stop us if you've heard this one: Apple's password protection in macOS can be thwarted
https://www.theregister.co.uk/2018/01/10/macos_password_bypass/
It just works. For anyone.
An Apple developer has uncovered another embarrassing vulnerability in macOS High Sierra, aka version 10.13, that lets someone bypass part of the operating system's password protections.