Now we get a decade or two of learning why that chip firmware needs to have open-source mechanisms that enforce separately defined policy.