The mainboard I use has an autoupdater in the setup screen. Connects to LAN (DHCP), requests updates, installs them. UEFI also allows updating from within the

The mainboard I use has an autoupdater in the setup screen. Connects to LAN (DHCP), requests updates, installs them. UEFI also allows updating from within the OS, and it looks like they formalized things a bit more, so that can be streamlined. (see https://blogs.gnome.org/hughsie/2015/03/03/updating-firmware-on-linux/ https://blogs.gnome.org/hughsie/2015/03/03/updating-firmware...) Then again, this is only necessary because UEFI is more complex than some operating systems, and thus provides the attack surface that they then have to defend like that.