disable VBE by default

The VBE protocol needs explicit device support and as such isn't particularly useful by itself without that, it also adds size and the potential of an attack vector so devices that wish to use this protocol should explicitly opt in to it like all other large features in U-Boot.

---
 boot/Kconfig | 1 -
 1 file changed, 1 deletion(-)

index 8fcdc36c931..556e868a5f4 100644
@@ -720,7 +720,6 @@ config BOOTMETH_QFW
 config BOOTMETH_VBE
 	bool "Bootdev support for Verified Boot for Embedded"
 	depends on FIT
-	default y
 	select BOOTMETH_GLOBAL
 	select EVENT
 	help

2.56.0