Trammell Hudson
The hardware hacker who showed that a Thunderbolt adapter could overwrite a Mac's firmware, then built firmware you can audit yourself.
Thunderstrike, which Hudson presented at 31C3 in December 2014, abused the fact that the Mac's EFI loaded Option ROMs from Thunderbolt devices during boot. A few minutes of physical access were enough to flash a bootkit that survived an operating-system reinstall, a disk swap and Apple's own signature checks. Thunderstrike 2 followed a year later with Xeno Kovah and Corey Kallenberg; it could be planted remotely and then spread via Thunderbolt accessories.
The answer was Heads: firmware built on coreboot with a small Linux kernel as its loader, using the TPM to measure and attest that the boot chain has not been tampered with. Before all that, Hudson had laid the foundations of Magic Lantern, the unofficial firmware that in 2009 gave Canon's DSLRs features Canon itself had no intention of selling.