Removing it required AMD's firmware code signing keys. If an attacker has those and some time they can do much worse.