My understanding is that secure boot calls an interface to make portion flash that contains a bootloader immutable. Since this is called after the bootloader start to run, does it mean there is no immutability before this instruction?
Is that not a security issue because the bootloader can be replaced before immutable settings are called with a version that doesn't include instruction for such setting?