The attack presented in the paper replace only the software without hardware intervention. It requires someone to MITM the robot update service, and that's not

The attack presented in the paper replace only the software without hardware intervention. It requires someone to MITM the robot update service, and that's not impossibile considering that someone still delivery software updates via HTTP.