Yes, hardware implants would best be done by swapping out a BMC/IPMI/DRAC/ILO chip, eg, modifying it upstream in the supply-chain. This type of implant would be much less geo/politically-damaging, if discovered, and more difficult to notice (unless the client checks integrity of all Flash EEPROMs) and more difficult to track down.