Hi, I've been confused also by this problem, that I have seen raised on other forums as well, so in hope it will help someone one day (or maybe my future self), please challenge if incorrect:

1. Security level 2 doesn't provide more security if the attacker can have physical access to the device ...