It shouldn&#x27;t be mounted rw, and only exposed at root. It shouldn&#x27;t be mounted by default. It shouldn&#x27;t even be a bloody filesystem. EFI variables have so much metadata and other information attached to them that trying to wedge them into the filesystem is just asking for problems like this. Were the maintainers smart, they&#x27;d dump the file system all together, because it&#x27;s a nonsensical way of presenting this data.