- is the obvious point (I thought) that - any script which gets through security could turn it on, just as a user does (or does not); and, for all I know yet:

It could also turn it ON and return an 'OFF' when queried for status. Even moi can see how to do that, conceptually.

So yeah, one could setup a Spectrum Analyzer and make Sure. I'd prefer a removable jumper on mobo which is - impervious to s/ware alteration. And about $10K cheaper.

(And.. the above scenario need not be activated other than infrequently; the rest of the time - all looks normal. Tell me this Cannot Happen. (And I'll not believe you. Either.))

OK - guess nobody has ever really looked at, "when system is lying, by someone's design"