@norootcause honestly, I'm really hoping we eventually learn what mitigations they put in place. It's all well and good for us to say you should have secondary access channels or automated rollbacks or whatever else. But that's a hard enough problem in userspace application code. How do you even do these things in the bootloader?