I think using superglue/epoxy on the chips combined with power-on memory checking and
disabling of external boot devices(such as network or usb booting) should be able to mitigate
this attack well enough, at least for all but the most paranoid of us.