Hi,
Is it deliberate that dd can not read from, or write to the host protected area? Or is it a bug?
It is sensible the the OS does not normally access the HPA, but dd is not a normal tool.
Personally I would expect it to be able to read from the HPA and to write to it with a suitable flag like, "--yes-I-am-reckless".
Some jurisdictions require that hard drives be blanked before disposal. Dd is the obvious tool for that.