EEPROM + physical jumpers are what I always recommended. Blocks most if not all software attacks, makes physical attacks more noticeable (eg at a cafe), and still leaves control in hands of owner. Just a bit of inconvenience but quite usable.