I can see the point that you shouldn&#x27;t make otherwise-undesirable OS changes to accommodate incompetent hardware designers. The thing is, I&#x27;m not convinced that it this is undesirable: mounting efivars read-only by default seems like a completely reasonable thing to do, even absent this particular hardware issue. BIOS setting are important and rarely need to be changed, and anything that doesn&#x27;t have the privileges to unlock efivars probably shouldn&#x27;t be messing with it anyway.