He could just boot of a LiveCD ....
The only way to protect data across more than one operating system is through encryption.
Also, a fundamental rule of computer security is that anyone with physical access to a machine can eventually get anything he wants from it. Encryption can stop this, but only in certain circumstances (there must be no plaintext or key material lurking about, which is very hard to ensure).