And can replace the firmware chip or motherboard or .... as well. I don't think secure boot protects against physical attackers, just remote ones. That's what the chromium docs say too.