"TENS differs from traditional operating systems in that it isn't continually patched" Uh-oh. They argue that this is not an issue since the drive is read only

"TENS differs from traditional operating systems in that it isn't continually patched" Uh-oh. They argue that this is not an issue since the drive is read only, preventing any persistence of malware between sessions. However, this still means that there are known and fixable holes in the system which are exposed in using TENS; just because the malware goes away when you reboot, doesn't make it ok to allow malware in in the first place. Also, what about literally any hardware security threats, like physical keyloggers or any evil low level software (bios, eufi, etc)