Either the former, or software people are even less knowledgeable of hardware than I thought.
This researcher has apparently had it for three goddamn years and never thought once to cold-dump the BIOS of an allegedly infected machine and inspect it? Bollocks.