Just because the dedicated server hosting industry hasn't been dealing with the problem, doesn't mean it's not there :)

If I flash the BIOS (or the network card firmware or the LOM device firmware or the disk controller firmware or the individual disk firmware, etc) with malicious firmware, it can lie to you when you try to reflash it later, leaving my malicious code running against later customers.