I do not see the logic in having a M.2 NVME SSD attached to the pci-express bus, which certainly has a totally closed source binary in its onboard controller... That's in the laptop, and it's OK? It has access to every disk read/write operation and manages a small RAM cache for the SSD flash, organizes the write wear leveling algorithm, etc.
But they have to go with some weird, ancient 802.11n card instead of a modern 802.11ac 3x3 MIMO, dual band Intel chipset card, because they don't like the binary blob in the ROM of the Intel minipci-express card?
At some point in time you have to trust the devices you're attaching to the pci-express bus in an x86-64 system or you won't have any useful functionality left.