Honestly, i do not consider that "good enough". Applying updates by manually searching for them, building a boot system with a completely different tech stack,

Honestly, i do not consider that "good enough". Applying updates by manually searching for them, building a boot system with a completely different tech stack, physically removing storage drives, ... i know people who couldn't be bothered to do that even if the update fixes an HCF error. Luckily the worst of the worst when it comes to firmware, the one on the wireless card that is reachable without direct physical access or a bridgehead on the system, is nowadays loaded by the driver and the binary blobs are updated by the package manager. At least for the most recent intel and qualcomm architectures (and maybe some other). However I am not entirely sure if they patch the device permanently or just load them for runtime. Relevant because there are wifi drivers embedded in UEFI (for example for WoWLAN), but who the heck has that enabled anyway.