right but without the part supply under control someone could just do it themselves so they need both, though it's true plenty damage is done software-only