The amount of software that requires write access to EFI variables (as root) is pretty small, so leaving it open all of the time in an environment where the fir

The amount of software that requires write access to EFI variables (as root) is pretty small, so leaving it open all of the time in an environment where the firmware writer could have bugs that cause this seems like it's not necessarily the best course of action.