So if I understand this correctly, now instead of bricking the system it will just fuck up the bootloader, even if the bootloader is completely unrelated to the linux install you are `rm -rf &#x2F;sys`ing. Since the useful efivars that set up bootloaders must be on the whitelist.<p>It&#x27;s an improvement, but it seems like we should do this <i>in addition to</i> default mounting read only.