> For example it boots from the GPU, not the CPU. Could you kindly point out a r...

ozten · on Oct 22, 2020

Not a definitive source, but https://raspberrypi.stackexchange.com/questions/14862/why-do...

georgeecollins · on Oct 22, 2020

Based on this, it looks like Broadcom open sourced the drivers. Does that make the Raspberry Pi potentially secure?

jamesgeck0 · on Oct 22, 2020

No. If I understand correctly, we now know that the Raspberry Pi 3 can never be fully secured due to corners cut by Broadcom.

https://github.com/christinaa/rpi-open-firmware/issues/37#is...

voltagex_ · on Oct 22, 2020

I understand why they stopped working on the Pi, but I don't necessarily agree with the reasons.

I've got several arm64 boards, and only one of them comes close to a "libre" boot. The Marvell Espressobin runs a fork of the Arm Trusted Firmware that diverged so far from mainline that after Marvell stopped working on it in 2018, it hasn't been touched, CVEs and all. The Pi actually has a chance of having a reimplemented bootloader and being used by a lot of people.