Physical locks on the product stop people who gain physical access without authority from undermining the system's IT security, covering the confidentiality, integrity and availability of its data: sensitive data, health data included, held on the product or on media stays secure to a degree proportionate to how sensitive and how voluminous it is, and the system is reasonably safe from tampering and from removal of components, with tampering, including removal of the product, detectable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.