I dunno, how expensive are these units? And how does that compare to the labor and time expense of hooking them up to be reprogrammed, vs the risk of theft / hacking?
I'm genuinely curious btw, Bird and co have a huge scale challenge on their hands, thousands of units all over the place.
They could at least have locked down the flash and RAM, triggering a flash mass erase when attempting to dump the firmware/RAM contents. Not that this would be 100% secure either, but with these STM32 HW features in place this is already significantly more difficult.
I don’t see how making it harder to dump the firmware makes the platform any more secure. Determined attackers will get in anyways and you’ll lose out on people who are interested in poking around.
It's usually done to prevent cheap chinese clones of your boards, not so much for security.
Imagine just receiving a batch of 1000 scooters with a botched firmware, which you must write off now because you can't reprogram them due to the disabled SWD. This happens more often than you might imagine.