The T2 in a portable stays on even when the Intel CPU and macOS are shutdown, so "persistence" is pretty easy (the T2 can go very very low power).

Once you own the T2 you can just disable secure boot and modify macOS anyway (like injecting EFI apps/drivers into the EFI System Partition).