That will still allow the case when the user has only traced SELF_HOLD but not the BUTTON pin. Then with no DISABLE_BUTTON, the user could turn on the board with a button push and the SELF_HOLD would ...

This project has not set up a SECURITY.md file yet.