[Sprite_tm]

I agree that the 'o noez, raspberry pi!' is high here, but one of the things you can do on other devices is something like secure boot, where the OS image on disk is signed and the device will boot to a 'rescue' firmware if it is compromised. Aside from physical access deterioration it also has the effect that an attack over the Internet generally cannot get permanence, that is, you can get rid of it by rebooting the device.