There’s nothing stopping you from flashing the firmware as soon as you get it.

I don't think this comment gets enough attention. This is exactly the problem here. You can't trust any company not to compromise the security on their product.