Drivers are part of it.
There can also be built in back doors that can be leveraged to extract display information.
As it's a gpu I'd imagine a backdoor could also be used to covertly run a malicious llm, could be used to crack hashed encryption keys (not a huge risk tbh but possible) as well as allowing for the covert exfiltration of display information directly. As part of any display device is output, either hdmi or DisplayPort, backdoors could allow for the interception of en/decrypted display information. Over hdmi at least. I'm not sure if DisplayPort video signals are encrypted or not but I'd assume so.