you're on the other side of the secure door already
killswitch is to prevent you from gaining root
Once you’ve got root, you don’t need to exploit compromised code to do whatever you want.
LSMs say otherwise
ring0 loadable kernel modules disagree.
Only to the extent there is not a deeply embedded core, of course. Or SMM
Neither of those are LSM though right ?
Or malloc(), or open()... They kind of discussing it in the thread on how to prevent this from a malicious actor (or from footgunning yourself), but my understanding it is not all that plain and simple...