Patrick Kennedy missed the point of the Bloomberg article, there. Bloomberg pointed out that the qualitative difference is that this is not an exploit of some

Patrick Kennedy missed the point of the Bloomberg article, there. Bloomberg pointed out that the qualitative difference is that this is not an exploit of some existing BMC firmware vulnerability. It is the sly introduction of subverted hardware at the point of manufacture and the corruption of the supply chain. It's not the BMC that is the locus of the vulnerability, but the supply chain itself. People had hypothesized this over the years. The Bloomberg report points out that it is a threat model that people seemed unwilling to pay attention to for economic and political reasons. That report, if true, is tantamount to "Yes, you were right about the threat; and this is not a hypothetical any more. China actually did it some years ago.".