Unfortunately very high, especially with modern systems using “trusted platform module” (TPM) hardware that can tell the software exactly what’s running, at a higher privilege level than the OS