I assume it’s probably because the baseboard management thing (iDRAC and the like) boot beforehand and can do various USB & ISO manipulation.