But at the same time, if you had a running processor with a known side channel vulnerability, and you know the manufacturer doesn’t release a mitigation or doesn’t really care that much about security, would you still use it? Is the manufacturer liable for not releasing mitigations or not caring that much about security?
If the airframe is not airworthy after inspections and there is no maintenance remedy that can be applied to it at an economical cost, then that airplane shall be scrapped… Even before it reaches the FAA. So in a way yes, if you can’t apply maintenance the way it is supposed to be, then it is not airworthy, and if the manufacturer does not release proper TNs to mitigate design flaws, then it is also not airworthy. I will wait to the report from the FAA and see what they find out.