I remember the days when a single virus destroyed practically every motherboard for my local government. They had to throw away every machine and replaced it, costing the Swedish government several millions in early 2000 (<a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;CIH_%28computer_virus%29" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;CIH_%28computer_virus%29</a>), and according wikipedia caused globally something around $1 billion US dollars in commercial damages.<p>A virus should not be able to destroy the system BIOS. The problem with efivars is illuminating a vulnerability, not a feature for &quot;doing stuff&quot;. I would expect to see this used in the wild if left unfixed, especially the next time we hear about a remote vulnerability that permit arbitrary memory execution.