Not quite true. Currently it requires physical access with a JTAG debugger. Presumably eventually it could be weaponized enough to allow access with any sort of USB device, and potentially remotely, but the latter is very unlikely.