There are also jumpers for configuring where it gets the boot loader, so when I did happen to put a bad build into the SPI flash, it was possible to recover by using the SD card.
I'll have to revisit the TianoCore build as my previous attempts to use it were miserable failures. I assume due to the fact that my OS isn't arranged in such a way as to support EFI booting.
I would love to get it up and running as my gut feeling is that running on a platform that less than 0.0000001% of users are using insulates you from almost all automated attacks I'd encounter on the internet. The only thing I'd feel more secure using would be a Talos PowerPC based system, but those are out of my budget.
https://github.com/MarvellEmbeddedProcessors/edk2-open-platf...
How to compile: http://wiki.macchiatobin.net/tiki-index.php?page=Build+from+...
How to run without flashing: https://lists.freebsd.org/pipermail/freebsd-arm/2018-October... (at the bottom) (tl;dr the 'bubt' command)