Sorry to jump into a thread I don't fully understand , but is this about having blobs in coreboot that get silently copied into the EPROM ?
If I understood it correctly up to now any blob had to be opted in through Kconfig, I don't really know if the idea is to avoid Kconfig for certain binaries but the user still has to place them on the tree (so nobody is using blobs inadvertently) or are there going to be parts of coreboot without source in the svn (so someone might be using sourceless code without knowing).
If the later I don't like the idea and at least I would like a huge warning "BLOBS IN HERE !!!" at the end of the make output.
Again, sorry at not fully following the thread or the patch.