Looking at https://wiki.st.com/stm32mpu/wiki/STM32MP2_boot_chain_overview there's so much secure boot and TEE and uboot and multistage boot chain complexity...
All I want to do is have the bootrom pull a native binary off SPI flash and run it with full privileges, but literally *none* of the docs are written with this use case in mind.
I don't want to run TF-A or uboot or whatever. I don't need secure boot at all.
But this is about par for the course, trying to use a Cortex-A SoC as a very fast microcontroller is probably not the average use case...