Thank you kyson-lok, that’s my experience, just wondered whether I was overlooking a u-boot environment switch.

I want to prevent accidental and/or malicious OpenWRT update via TFTP auto update, so have disabled in source.