I wonder if full device wipe would be the solution to "annoying enough that regular users don't do it even when asked by a scam, but power users can and will definitely use it".
That's how bootloader unlocking has worked on Android phones for ages, and I've never heard of it being abused, so I think it's a good model.
That's how bootloader unlocking has worked on Android phones for ages, and I've never heard of it being abused, so I think it's a good model.