I like they use main processing unit from a Dutch company; is its ROM open source or/and can be accessed? All ARM-based Sytem-on-Chips do have a proprietary ROM, which is used mainly for boot-up and multicore management. But there's no access to check if it may do something else. >> The mobile baseband will most likely use ROM loaded firmware this is another vulnerability
The immutable ROM that finds firmware and jumps to it is indeed usually proprietary, but since it's tiny and immutable, it's considered "part of hardware" and is okay even for the FSF "Respects your Freedom" certification. The one mutable/loadable blob the i.MX8 requires is firmware for the DDR4 PHY (not training code you run on the CPU, but something that runs on the PHY apparently??) and they're using an embedded t…
Depends on how privileged the peripheral or subsystem is. And what data it is trusted with.
If it can't harm the main CPU and is properly confined then it's fine in my book.