Security and frozen modules

[troy salt]

Through the REPL, is it possible to get access to frozen modules and boot-loaded firmware if it is not encrypted? Or does one only have access to the scripts and the high level files?

And if not through the REPL/FTP, how difficult is it to get access to the firmware? I am trying to weigh out how important secure boot/encryption is vs just using frozen modules as a security barrier.

Thanks

[robert-hh]

@troy-salt If you have access to the device, you can read the flash with esptool.py.