AFAIK the AVR hasn't been broken yet. Once you disable the program read function, the only way to get it back is after a chip erase, which makes your existing program dissapear. So it's not necessary to make the chip essentially a "one time programmable" device to do this.
Message
Re: [AVR-Chat] Fuses: Permanently disable spi/isp
2007-10-23 by David VanHorn