NBD (over TLS) would be even better because it loads on demand. You could ship large full-featured OS images and only the parts/features you used would be load

NBD (over TLS) would be even better because it loads on demand. You could ship large full-featured OS images and only the parts/features you used would be loaded. One day when I'm retired I plan to add this to OVMF.