understood. but does not restricting blobs to a place where verification is impossible isolate the problem? to me this approach still seems reasonable from a free software (as per FSF) point of view

also i am confused why this issue isnt being taken with the hardware manufacturers? if i purchased their product, and if their user license did not forbid me from using linux-libre, and if this update is absolutely vital for my safety, then it makes much more sense to take issue with the manufactures. they should open source the update in this case