How is that not really what was possible - https://securityaffairs.co/wordpress/90758/hacking/usbanywhe...

I get it, he called it a "spy-chip" but the BMC really did have exploitable attack surface.