Parameters could be stored in separate memory from the operating system that interprets those parameters. This is somewhat similar to what Apple does with the s

Parameters could be stored in separate memory from the operating system that interprets those parameters. This is somewhat similar to what Apple does with the secure enclave. That way, wearout parameters and non-risky user tunables would still be customizable without risk of compromise. Heck, even if that had to be implemented with an entirely separate hardware chip for parameter storage on the motherboard, the added cost would be negligible.