TinyCLR Code Protection - Prod run programming

Does TinyCLR offer any readout protection?

I have always stayed away from NETMF because of how easy it is to readout and duplicate.

Also, is USB the only programming option?

Ultimately, I would like to use JTAG to flash and lock the chip up, but I know the GHI bootloader is required therefore that is not an option. (Would also save on BOM cost)

As GHI now has full control over everything in TinyCLR OS, this is on the top of the list. Many customers have request this feature. However, this is not implemented yet.