So a quick translation of this is there embedding this in the bootstrap firmware...
The code that starts the computer up sets all the parameters and loads the operating system in
Pretty much sounds like a root kit, but worse since it’s embedded in firmware simply wiping and reloading won’t fix it.
The opportunity to add that code to the firmware was closed by Apple last year. Now, the Firmware can no longer be updated or changed by any peripheral plugged into an ethernet, USB, or Thunderbolt port, which is what the CIA's software was designed to do. Even a SuperUser cannot update the firmware without an additional beyond SuperUser passcode to prevent just this kind of scenario and that passcode must be input manually from the keyboard.