It does mean that any secondhand computer or CPU (or even CPU from a sketchy source) could be compromised prior to being physically sold.
It’s worse than that, any AMD chip from any source except maybe AMD directly is suspect. Mine is a few years old from Amazon supposedly new, for all I know it came compromised and is sitting there doing what I tell it to until it triggers and I won’t even know when or if it happens.