Lightweight Portable Security

I got the impression that the system was supposed to be able to protect against malware that might be created intentionally by nation states that might be specifically targeting the user. It isn't marketed to only protect against run-of-the-mill windows malware, so it's reasonable to expect that it should be able to defend against attacks that specifically target computer. Which also I presume would mean protecting against attacks that rewrite the BIOS, since that could compromise future uses of the system, since it could boot from the hard drive while pretending to boot from the CD or usb stick.