GrapheneOS It could be used to flash another verified boot, enable debugging features, etc.
Is this prevented in GrapheneOS? And if not, what are the implications of a adversary messing with this stuff? Will it be reverted on reboot, or presist until I factory reset the device?