<p>hardly anything is a bigger red flag in security than &quot;we make our code secure by restricting access to it.&quot; most of all, the startup code in ROM.</p>