To be fair, userspace access to these variables is required in order to manage EFI boot.  Having them there to be deleted (by root!) accidentally is probably bad, but this isn&#x27;t a meaningful security fix.<p>The real crisis here is that modern firmware is developed in an environment so fragile and isolated that it&#x27;s simply unable to recover from configuration that is &quot;wrong&quot;.<p>I had a laptop that I bricked about two years ago by accidentally wiping out the partition table on the soldered-down storage.