This is not new at all. Clear back in "Applied Cryptography", Schneier said that there is no security without physical security. If someone can physically get at your box, it's all over. For most people, he said, that level of paranoia is overkill, but for some it is very real.

And then there's what happened to Target. Someone got to their machines, not physically, but with a trusted download. That paranoia now has to be carefully thought through by everyone who cares about their security...