* but only if you have local network access while they're trying to network boot

Seems a bit overblown, couldn't you just serve a malicious boot image anyway?