&gt; It shouldn&#x27;t be mounted rw<p>It should be mounted rw because existing userspace expects it to be rw.<p>&gt; It shouldn&#x27;t be mounted by default.<p>It should be mounted by default because it&#x27;s information that&#x27;s relevant to various pieces of userspace.<p>&gt; It shouldn&#x27;t even be a bloody filesystem.<p>With hindsight, it should absolutely not have been a filesystem. There&#x27;s very little metadata associated with EFI variables and the convenience of exposing this in a way that can be handled using read and write is huge, but real-world firmware turns out to be fragile enough that this was a mistake. But, in the absence of a time machine, there&#x27;s very little I can do to fix that now.