> it could internally store and run the shady code from the manufacturer, while giving you a perfectly legit and signed dump as the one provided by the manufact

> it could internally store and run the shady code from the manufacturer, while giving you a perfectly legit and signed dump as the one provided by the manufacturer. If you had the right to replace it with your own copy, you could make it blink lights in morse code at various points in the software to prove it was executing your code. Of course they could still do sneaky things, but it would be harder.