One researcher criticizes this type of hardware attack, saying: Once discovered, such an attack would be burned for every affected board as people would replac

One researcher criticizes this type of hardware attack, saying: Once discovered, such an attack would be burned for every affected board as people would replace them. But this article also points out a case where, even after SuperMicro had published a patch to a serious BMC firmware vulnerability, 32,000 servers in the wild had not been updated a year later. So, if software updates aren't always speedily/reliably deployed in the wild by customers, can we really expect hardware to be speedily replaced?