Did everyone just forget about the time they put malware in their BIOS and installed dodgy root CAs on people’s machines (Superfish)? I am surprised they have

Did everyone just forget about the time they put malware in their BIOS and installed dodgy root CAs on people’s machines (Superfish)? I am surprised they have remained so prominent in security-conscious organisations since.