> But there are many large providers that rent dedicated hardware without a hypervisor. Are they just ignoring these concerns, hoping that this kind of tamperin

> But there are many large providers that rent dedicated hardware without a hypervisor. Are they just ignoring these concerns, hoping that this kind of tampering would be rare anyway? Yes. You can try to mitigate the risk a bit, but it's still there. Just think of all the other firmware you can update, not just UEFI. Also, for large contracts, rented servers are usually bought new and not re-used for multiple reasons (this is why providers have used server markets!). Virtualization overhead is so low nowadays that it's not worth the risk. Provisioning is much harder, too.