To eliminate that risk, use the BitLocker To Go feature of Windows 10 Pro and Enterprise editions to encrypt the drive so that it can't be read without a password.