Should devices like tablets, with enclosed batteries, be required to have physical circuit breakers for power, as a security measure, if compromised?
We realized that we had to have a planned action to block MACs from the network, in response to any device having questionable integrity.
Even a small Faraday cage was considered - WiFi not the only radio on portables: laptops without removable batteries hop across LTE via VPN... so that was another policy to set a script to shut down.
Persistence, in this case of processes - or just not being able to remove a battery - is a threat that with good reason shocked us, because it is so ubiquitous. I believe the moment a unscheduled reboot or shutdown occurs, at the very least all LAN/WAN access needs to be automatically cut.
edit:typo
There are workarounds, like adding a layer of faster, cheaper ram, but then this starts to look like a big perf improvement in a rather traditional system.