Of course it should involve software, that's one line of defense. A problem in software should have a second line - hardware. Same the other way round, just be

Of course it should involve software, that's one line of defense. A problem in software should have a second line - hardware. Same the other way round, just because the hardware shouldn't allow setting a value to X, doesn't mean the software should request the setting.