@Suiseiseki @djsumdog On servers there's usually a dedicated management port, yes, and on mine I don't think it's handled by the same chipset either.

In any case even if it were a single chipset, if it only listened to the network on the dedicated physical port and no other, abusing the built-in proprietary malware would be much more difficult.