My MacOS forensics skills are a little rusty, but even that would leave an indication that something happened for someone looking. 

But I don't think you could even get that far if the device is locked and password protected unless you already know the password.