Re: For decades now
This, and add a physical switch to write protect the boot flash, probably in the form of an absent jumper that needs to be put in, to alter the flash. Why anyone thought it a good idea to leave the boot flash in a writeable state by default is beyond comprehension