Hello, I'm also in favor of separating the tools from the EFI binaries.
Due to the tools, the efibootguard package currently has a dependency on python3, which we are currently patching out since we don't need the tools in our images anyway. Installing Python would significantly increase our internal efforts for example related to vulnerability management and OSS license clearing. For us, this bug is more than wish list level as we want to get rid of our internal patch as soon as possible. Thank you.