Does anyone seriously think that attackers won’t try every single potential avenue regardless of how “realistic” it seems?

Yes. I wouldn't be burning write access to Dell's update servers on something so unlikely to achieve an objective.