Assuming a device is running with Secure Boot enabled and a modern M.2 PCIe SSD with a GPT partition table, is it possible to infect the SSD itself with malware? I'm thinking something like an MBR virus of the past, or infecting the SSD's firmware itself.
Also assume that the malware itself had unrestricted DMA via Thunderbolt 3.