You're right. It isn't beyond it. But to do this you need access to the binaries and build process to do a differential analysis for injection. If you had acces

You're right. It isn't beyond it. But to do this you need access to the binaries and build process to do a differential analysis for injection. If you had access to that why would you not modify at firmware load time? I can't see any logic in leaving a physical device on the board as evidence. It's like leaving a machete with your fingerprints all over it when you murder someone.