[tedunangst]

How do you determine when to push the button?

[bluescrn]

Instead, write-protect the firmware by default, and require the user to press a physical button on the back of the PC to write-enable it (for a limited duration/until the next reboot)

[Dylan16807]

Any time you're reinstalling the OS and suspect the old OS had malware.

Or if you want to make it simpler, any time you're reinstalling the OS.

[jtbayly]

Once a day ought to do…