Does BIOS and EC write protection work?

[gondolyr]

Pureboot wouldn’t control the write protection afaik.

Last I heard, the switches on the motherboard aren’t fully functional still.

EC protection, Librem 14

Pureboot doesn’t measure the EC. We may add that feature in the future, but there’s no good way to do so besides reading the EC from flash and hashing it (which isn’t very fast). And would require adding additional tooling to Pureboot, which isn’t easy for a few reasons you should leave them unset (off) until such time as we implement WP using them