"But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, th

"But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM)." In our hypothetical (and I suspect in reality), the code doing scary/concerning things sits in userspace on top of MINIX, so they'd just have to constrain their updates to that system.