Basically all computers use efuses, otherwise it would be possible to rollback the firmware to a previous, insecure version.
For something like a game console, that’s annoying, for a phone or laptop, that’s highly desirable if something like a TPM bug is fixed, without efuses the system would forever be vulnerable.
E-fuses are just write once memory with limited reads ability 10e6-10e7 read cycles after which it becomes unreliable.
Secure boot that can't be controlled by the user should be illegal, though. You should get some secret code along with a device, that allows you as the buyer to tamper with it. So much hardware out there can just serve as something else, or can be supported by people on a voluntary basis, sans the completely arbitrary lockdown of ability to install your own code to the device.
Basically all computers use efuses, otherwise it would be possible to rollback the firmware to a previous, insecure version.
For something like a game console, that’s annoying, for a phone or laptop, that’s highly desirable if something like a TPM bug is fixed, without efuses the system would forever be vulnerable.
E-fuses are just write once memory with limited reads ability 10e6-10e7 read cycles after which it becomes unreliable.
Secure boot that can't be controlled by the user should be illegal, though. You should get some secret code along with a device, that allows you as the buyer to tamper with it. So much hardware out there can just serve as something else, or can be supported by people on a voluntary basis, sans the completely arbitrary lockdown of ability to install your own code to the device.