Maybe nest an install script in cpu microcode that executes at random power ons to install a minimal windows IoT for the sole reason of highjacking boot sequences?