This seems to me insane: if somebody has the access to your laptop to install malicious hardware, they also have access to install much more difficult to detect

This seems to me insane: if somebody has the access to your laptop to install malicious hardware, they also have access to install much more difficult to detect malicious software.