Internet-exposed devices that give BIOS-level access? What could possibly go wrong?

Source: Ars Technica