disagree. It&#x27;s not just systemd that could mount efivars as read&#x2F;write, anyone could. So anyone that does will fall prey to this. It&#x27;s firmware, and failing that, the kernel protecting you is a good second.