The user does have to log in again to access the second TTY. I don’t know exactly what Hyprland’s settings do, but “allow_session_lock_restore” doesn’t sound like something you want turning on randomly while an attacker is sitting trying to access your computer. It’s very possible the crash itself was caused intentionally by the attacker in that case.