This was a trade-off for developers running with soft-sync disabled.

We're thinking about introducing a new flag in EC-RO:

  0: PD is disabled regardless of SPI WP state (proposed behavior)
  1: PD is enabled if SPI WP is off (current behavior)

This flag should be ideally located somewhere addressed by fmap so that it can be changed without recompilation (just like GBB flags).

For those who need to disable soft-sync (for whatever reasons), we can offer a tool setting the flag to 1.

Alternatively, the flag can be:

  0: PD is disabled in RO
  1: PD is enabled in RO

This scheme is simpler but we have to make sure we won't ship devices with the flag set (while in the 1st scheme, it doesn't matter because PD is disabled as long as SPI WP is on).

Factory finalize should use a host command to read the flag(s) to ensure they're in the proper state.  Similar to how it checks AP's GBB flags.

One example of confusion: https://issuetracker.google.com/80052680.