I guess basically? I'd guess the security issue from such firmware would be someone offering L33t Ultra Kustom[1] firmware based on the leaked code that claims

I guess basically? I'd guess the security issue from such firmware would be someone offering L33t Ultra Kustom[1] firmware based on the leaked code that claims to do something people want (remove overclocking limits on lower end boards or whatever) but also slips in something like a SMM rootkit or whatever alongside it. Although it would be a rather narrow target profile, so I suspect it’s somewhat theoretical. MSI also has a bit of a support / PR issue if the L33t Ultra Kustom firmware didn't have a rootkit, but managed to somehow brick the hardware because some software / firmware restrictions are there for a reason. [1] You can tell, I'm really down with the kids.