The attack doesn't require physical access. It makes rooting potentially undetectable and unfixable. It also uses a very unexpected attack vector, which means

The attack doesn't require physical access. It makes rooting potentially undetectable and unfixable. It also uses a very unexpected attack vector, which means there could be some surprising effects. Remember slow-propogating floppy disk viruses? Think about the way keyboards are shuffled around offices.