<i>&gt; You&#x27;d need a reliable way to store the state to avoid tampering.</i><p>It&#x27;s the same problem. If the user can set it, then it can also be set by malware running at the same privilege as the user.<p>The only solution is to move the check outside of this privilege level (i.e. the readonly `.text` section of the firefox binary in &#x2F;usr&#x2F; or Program Files). That&#x27;s what the signing requirement does.