This sounds like a good thing overall, considering most OEMs can't even be bothered to update devices for Spectre that are older than 2 years. However, I can't

This sounds like a good thing overall, considering most OEMs can't even be bothered to update devices for Spectre that are older than 2 years. However, I can't help but think that this is yet another thing on NSA/FBI's wishlist to Microsoft, just as most of the tracking stuff in Windows 10 seems to be. Say hello to "targeted malicious updates" by the U.S. government. Yes, I know this was probably possible with the Windows updates already, but I imagine the malicious firmware will be much less likely to detect = the agencies can use this against many more people.