New machines all use UEFI. There's plenty of space for malware to hide in there.