> it would not be permanent If it's not permanent then it doesn't work - any plausible mechanism for allowing it to be disabled can be triggered by whoever's r

> it would not be permanent If it's not permanent then it doesn't work - any plausible mechanism for allowing it to be disabled can be triggered by whoever's replacing your firmware (which makes AMD's approach somewhat bewildering here, given that you can just replace the CPU). But yes, I agree that enabling it by default is probably the wrong approach here.