Do you develop on GitHub? You can keep using GitHub but automatically sync your GitHub releases to SourceForge quickly and easily with this tool so your projects have a backup location, and get your project in front of SourceForge's nearly 20 million monthly users. It takes less than a minute. Get new users downloading your project releases today!
Well first you need to compromise a machine. Game over there and then, let alone starting to re-flash BOIS or whatever - this is just another *thing* that can be changed once you own the machine. No big surprise there.
Of course, as to your question - if you have physical access (and a black hat), then game over anyway.
So you need admin and be able to install a dodgy kernel module to trash the machine. Then again, if you got that far, a 2lb hammer would suffice without needing to know anything about computers/kernels/modules.