If you want to avoid quick swaps so it takes slightly longer to compromise, that's fair. But that means you should go with the "actual ROM" option.
And if you need to desolder to remove the malicious code, it's pretty reasonable to call it unremovable.