RDP2 is barely any more secure than RDP1. When the processor boots, it reads the read-out protection value from flash. If it's one specific value, it's RDP2, if it's another specific value, it's RDP0, and if it's any other value, it's RDP1. This means that all you have to do to downgrade the chip to RDP1 is glitch it while it's reading that value, then you can use one of the RDP1 errata to read out the flash.

In general read-out protection only prevents the most casual of hobbyists from getting your firmware. Anyone who thought otherwise even pre-AI doesn't know what they're doing. It's sort of like how blu-ray copy protection only prevents people who don't know about MakeMKV from copying their discs, or how HDCP only prevents people who can't find a $20 HDCP terminating HDMI splitter from capturing the protected video.