Do you have something concrete to recommend?
The recommendation I've seen for Surface products is to update everything under Windows before installing Linux. That's probably sufficient for firmware updates on a five year old tablet as I don't expect there will be many new ones in the future. I'm not going to be a free software purist here, especially buying used.