Yes, Windows could attack the non-encrypted boot partition (or BIOS) and infect it. You could mitigate this by using anti-evil-maid or Heads.