>the software will have to be rewritten from scratch

Would you even be able to trust the hardware anymore? If it's already compromised then it's safer to assume it goes deep (firmware).