Since the lead in this story is maximally buried - "You put hardware in a device to help you persist the software, the malware. You don’t put hardware in a dev

Since the lead in this story is maximally buried - "You put hardware in a device to help you persist the software, the malware. You don’t put hardware in a device to do the whole attack, you put hardware in the device to unlock the keys, to elevate the privileges on the shell, to open the network port and then you take a software or remote approach to do the rest of the work. And I think that’s the context of that quote."