4 ms·

They explicitly allowed booting from unsigned code. They can break it with one firmware patch any time.