Comment by zydeco

The EFI firmware is validated by the T2, which then passes it on to the x86 CPU. I assume this modification would not persist after the T2 reboots.