Microsoft Surface: Security concerns responsible for the lack of Thunderbolt & upgradable RAM (allegedly)

[123]

Forgot to add:

2. Until hardware catches up, rely on pre-boot authentication (Bitlocker TPM+PIN, etc.).

and strictly enforce no device sleep policies - only shutdown or hibernation should be allowed.