[kw71]

Okay, I am in the habit of using pulls, and even some micros have pulls that can be switched in. That may be pointless when there is only one slave on the SPI, as it probably is in the attacked system, as the /CE is probably strapped active so the device will never switch that pin to high Z.