Tianocore, being a standard UEFI, is vulnerable to UEFI-targeting malware whose functionality is based on UEFI architecture. "Traditional" payloads are not UEFI - and therefore are not vulnerable to UEFI-targeting malware. It does not take a genius to realize that.