I'm doing a talk on an open hw design/open source HSM at ShmooCon in a month or so, which seems like the only viable way to deal with this threat.

TCG (TPM, TXT, ...) Measured boot sort of includes firmware checksumming. It's often turned off.