[Boudica]

If I'm reading this correctly, the "hacker" must have physical possession of the device. Although they may not need it for long, surely the temporary solution is to not let the laptop ever leave your possession and don't let anyone else use it until you know the vulnerability is fixed? Sadly, the people who would need to be made aware of this most, probably have no idea this vulnerability exists.