If your drive is encrypted, however, when they try to use that method to access the drive they'll have to provide the decryption key (which they shouldn't have) in order to access anything on the drive. Then by adding your hard drive as a second drive on a machine they control, they may be able to access your data without needing your credentials.
If somebody wants to bypass those Windows protections they could open the computer case and remove the physical hard drive. Normally when you access your data it's through Windows 10 and has the usual protections associated with signing into Windows 10.
