Thunderbolt flaws affect millions of computers – even locking unattended devices won’t help