Did everyone just forget about the time they put malware in their BIOS and installed dodgy root CAs on people’s machines (Superfish)?

I am surprised they have remained so prominent in security-conscious organisations since.