In addition, AFAIK this affects both the ARM and x86 firmware, so a patched binary would imply two separate modifications.  Though that would still leave open the possibility that the toolchain was exploited before compilation occurred.