This would not help if the laptop was powered off during the intercourse. Also this would not help in case of dummy cards like type-C or type-A that are essentially a 3cm piece of extension cable in a fancy case. Udev wouldn’t be able track such a device insertion/removal since there is no device there, only passive wires. But that does not prevent an attacker from creating one that would be in stealth mode most of the time waiting for a command. Also even more active USB devices an attacker can scan the original card and its IDs and write them to a malicious clone within seconds.
That’s why I was talking about an already existing breach detection circuit that is operated by an EC, is OS independent, and tracks if input cover was opened.
This is the button with the lever:
