The situation we're discussing already involves taking the machine apart to short the security eeprom during boot. Once you've accepted physical attacks as part

The situation we're discussing already involves taking the machine apart to short the security eeprom during boot. Once you've accepted physical attacks as part of your threat model it seems reasonable to say that any mitigations you're designing should be resilient to physical attacks as well.