Comment by bigfatkitten

It's not theoretical at all. You can flash firmware updates from userspace on pretty much any modern x86 machine but in practice, UEFI bootkits are almost good.

If you want a case study, BlackLotus is a good starting point.

https://www.eset.com/au/about/newsroom/press-releases1/eset-...