You are relying on every single ssd to have a secure implementation of encryption which is just never going to be true.

I’m not familiar with how the process works, but if you are setting the password somewhere, it’s exposed to being extracted. You want the password to be something you type in on boot.