And then you realize that most HWWs don’t allow you to do that even if “open source”.

And how do you still not know there isn’t code running on the HWW that was loaded from factory? The update process doesn’t have to replace all of the code.