content: Well you only need physical access to the system once, rather than on an ongoing basis, so it's still useful. Imagine you get in as an air conditioning tech (say) using social engineering and you mange to infect a server room computer. You then don't need to penetrate the actual server room again.