Also you can boot from livecd each time. You can use livecd boot on your internet-enabled device. Imagine fellow rootkiter's frustration when he realises root filesystem is read only.

Of course you're still vulnerable to BIOS/firmware malware.