But they're going to argue that custom firmware is bad "for safety". And they're not necessarily wrong, especially if they deliberately make an entangled mess where safety-critical control systems share code paths with their spyware.