There is a Nitro security chip that is integrated into the motherboard. SPI and I2C buses are routed through the security chip. During system reset, the securit

There is a Nitro security chip that is integrated into the motherboard. SPI and I2C buses are routed through the security chip. During system reset, the security chip holds motherboard components in reset while firmware is inspected out of band. So all contents of flash are verified. Local NVMe storage is also handled through our Nitro hardware, and the underlying physical flash devices are protected from firmware modifications. https://www.youtube.com/watch?v=o9_4uGvbvnk https://www.youtube.com/watch?v=o9_4uGvbvnk provides an overview.