[bravo22]

SPI flash has a write disable pin but that would also prevent Apple updates.

[13]

Could bodge in a physical switch for write protect.