[maxerickson]

The malicious firmware could just omit all that stuff.

I guess the disconnect could be physical/mechanical and require physical intervention to reconnect (but cost, etc.).