If your attack vector is bad guys with physical access to the circuit board, disabling JTAG will only be a minor speedbump to them. The vast majority of microc

If your attack vector is bad guys with physical access to the circuit board, disabling JTAG will only be a minor speedbump to them. The vast majority of microcontrollers aren't hardened against physical attack - especially not anything with wifi capability. "disable jtag" is intended to make it harder to make modchips (ie. bypass the coffee subscription), but doesn't help against someone willing to do a one-off glitching attack or similar to dump secrets.