SVFeingold:
Funny I had assumed that /CS wouldn't need a pull-up...I suppose if the chip is unselected then it will ignore input on the clock/data lines anyway.
I don't understand your logic there. In order to ensure the chip is unselected during the boot sequence /CS is the very one that needs a passive pull-up. That would be my most important one to address.