It's how I installed Arch btw on my desktop, tiny boot image basically downloads the installer into RAM - NetBoot.

But yeah, if you've got a computer that's old enough to be fully supported yet new enough to have the UEFI for hardware, an ethernet network which is robust enough to download full system images on every restart yet simple enough for the firmware to understand, and tonnes of memory free to hold the whole OS at all times, and you can tolerate the fact that restarts take ages, then it works great.

dhcp and tftp. pretty easy.

ipxe with appropriate kernels, images and config files was a bit more difficult. Used it for over a decade at work.. installed thousands of operating systems, headless and diskless crypto miners and recover tools.

I once ran out of functional flash drives and DVDs, so I SSHed into a home router, made a new dnsmasq config in the tmpfs, then killed dnsmasq and quickly ran it again but with the new config before the pile of scripts acting as init noticed and rebooted everything. I pointed it to that netboot dot xyz piece of shit. It did work, though.

I think the detailed description of this vulnerability described it as non-persistent in UEFI, but that you could install something that runs before secure boot that would be persistent. I think that's splitting hairs, though - if you've been compromised by someone that has the skills to pull this exploit off, then they can probably chain something else into it now that they've got basically bare-metal access.