Ya know, someone needs to invent a little padlocked door that you can shut on the backside of a computer to block physical access to ALL ports.

Various and sundry problems solved.