Some mice have user-upgradeable firmware. If you plug one of them into a system and the adversary roots the system, you should assume any other system you plug that mouse into is rooted.

Given the prevailing prices for mice and for computer vulnerability researchers, I'd thing buying a new mouse is orders of magnitude cheaper than verifying that a suspect mouse does not contain a threat.