> ARM allows an individual with proper access to disable / replace the
> TrustZone firmwar
Could you give a practical exmple of that? I have numerous ARM systems, and all of the modern ones seem to include some signed binary blobs in the boot process.