Surrounded by exploits

I somewhat disagree with the term “exploit” in this context, because it suggests that a security mechanism was successfully circumvented. Please keep in mind that you have to be able to send raw commands to the card, which means "root" access on the machine to which the card is currently connected to (in this case: send the non-standard command that tells the card to switch to a firmware upgrade mode of operation).

It's not different to “normal” firmware/BIOS/UEFI upgrades on machines (which can, and as the NSA has shown with the bugs allgedly able to hide in system-management mode, is being used to plant malware), only that Bunnie has been able to do it on a very obscure platform where changing firmware was considered impossible by most.

The “exploit” we have to concern ourselves now with is a diffent one: Writers of filesystems have to keep in mind that (besides the always existing possibility of data corruption due to general bit rot) a devices we always assumed to be a dumb storage for data blocks might return something different to what was stored on it, and even read from it just previously, and additionally the returned data might be specifically crafted to confuse a safety mechanism. E.g. calculate a checksum, verify a file, and then read it again for execution might no longer be a good idea (some kind of TV, I think, was rooted with this method not long ago).