So, the access required seems to be: 1) MASTERKEY: Reflash UEFI BIOS (local access, or defeat the specific BIOS, such as from AMI) 2) RYZENFALL: defeats a bunch

So, the access required seems to be: 1) MASTERKEY: Reflash UEFI BIOS (local access, or defeat the specific BIOS, such as from AMI) 2) RYZENFALL: defeats a bunch of TPM and other secure boot/etc. stuff. Even in 2018 a lot of this is unused, and should never be your only security 3) FALLOUT: allows defeating some bootloader security, but isn't a big deal except on some locked down endpoints. 4) CHIMERA: some kind of chipset backdoor requiring local root. Unclear how big a deal this is due to access required. Overall, even if these are real, they're not showstoppers. If your security depends on TPM/etc., you're screwed anyway. They do allow local malware to do worse things, and might require some mitigations in shared environments, but it's mostly stuff you should already have protected in those settings anyway.