Leaving debug pads is not a vulnerability that most people care about. Expecting physical tamper resistance is unnecessary for regular appliances. Even if the

Leaving debug pads is not a vulnerability that most people care about. Expecting physical tamper resistance is unnecessary for regular appliances. Even if the debug pads weren't available, one could replace the flash, or use a scanning electron microscope to modify bits in the main microprocessor. This isn't a smart card. Here's a vulnerability that almost every device has: an attacker with physical access can replace the device with an identical looking device. The new device might even have explosives!