The parent is referring to the replacement firmware not the OS and above. This is different from running the same FOSS software on other more closed hardware.

The parent is referring to the replacement firmware not the OS and above. This is different from running the same FOSS software on other more closed hardware. It's a valid concern: On the one hand Purism is gradually achieving their intermediate ideal of providing machines with open firmware for all the hardware; On the other hand, if the real life security of that open firmware is poor, it undermines their underlying principle of privacy - To complicate matters it may not be technically worse than the proprietary blobs it replaced, but it's open for all to see. In other words, to achieve real world privacy, it's not enough for the firmware to be open, it must also be secure.