If they get root or admin they can hack the chip itself.

But minor exploits, nada, no issue, you good. Gotta get root to make it happen.

Problem is if you, as they say, get got, you have no way of knowing if they’re in your CPU, and no way to fix if they did – basically gotta trash it and replace.