But not all of them, right? Some of the vulnerabilities do require upstream microcode updates, and without them, I feel like the risk introduced outweighs any benefit provided by Libreboot.