[rando3826]

In linux, there is the immutable file attribute which won't let root rm the file without first changing it with chattr.

[ploxiln]

File attributes need to be implemented by the filesystem. efivars is a pseudo-filesystem which does not implement them. It could, but that is one of the more needlessly complicated solutions...