Is it possible to disable the serial downloader.
(I mean so that even if BOOT_MODE is set to 01b)
For example, after programming an eMMC and verifying all functionality is correct, prevent anyone from accessing the device via the serial downloader, e.g. by setting BOOT_MODE to 01b
(The only way I can think of is to use HAB to ensure that even via serial-downloader no one can run un-authenticed software).