Now anyone can sign device firmware with MSI private keys. This represents a long-term persistent risk to be considered by all users.