A BMC with a soft CPU will create a whole new class of security vulnerabilities. Now you can hide malware within the BMC's gateware as well as its firmware.