I don't understand the problem. I get microcode updates with apt and general firmware with fwupd (ready to install on next boot from UEFI). As far as I now that's the intended/supported procedure.