Re: [PATCH 7/7] gnu: Enable CONFIG_HOTPLUG_PCI.

[Danny Milosavljevic]

> If the device has internal storage and if someone wanted to
> target you and did have the resources to do so, they could reflash the
> chip and you'd never know.

They can't if it's read-only (and if they are without physical access to the 
room). On the other hand, if they had physical access they could do anything - 
they could replace your entire computer with a prop that just waits for you to 
type your unlock key.

Of course the situation where they can reflash it remotely whenever they want 
but you can't reflash it at all is the worst of all possible situations - but 
it's not the same as option 3.