It was considered insanely hard to poison a computer's BIOS remotely, but if I was going to rebuild a computer that had been fatally pwned, ignoring the BIOS would be like changing all your house locks after losing your keys but leaving all the windows unlocked.