Reporting on Xusheng Li’s research says the Lenovo ThinkPlus FU100 used a fingerprint only to enable its USB connection while storing data unencrypted on an internal SD card. The TSD303 SSD did encrypt data, but its design exposed the password to the host. A separate research post documents a fixed key in Netac software and hidden accounts in other copy-protection products, including Codex-assisted analysis. Service arrangements reported for affected Lenovo products include replacement or an on-site update, with backup and erasure before return. A biometric lock should not be treated as proof of encryption; sensitive files need separate, verified protection.