There is a few mechanisms through which hardware can get the OS to execute code, so it is possible for the BIOS to cause software to be installed. E.g. the easiest one is probably the "Windows Platform Binary Table" in ACPI.

I guess you're right. I don't understand why my previous comment is being downvoted though.

I mean, HN has an explicit rule about not claiming others on the site are part of state campaigns, so flagging seems like the correct response?